CVE-2016-7908: Medium severity qemu vulnerability
The mcffecdotx function in hw/net/mcffec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7908?
CVE-2016-7908 has a severity rating that indicates it can lead to a denial of service vulnerability.
How do I fix CVE-2016-7908?
To resolve CVE-2016-7908, update QEMU to a version greater than 2.7.1 where the issue has been patched.
What systems are affected by CVE-2016-7908?
CVE-2016-7908 affects QEMU versions up to and including 2.7.1 and Debian Linux version 8.0.
What types of attacks can exploit CVE-2016-7908?
CVE-2016-7908 can be exploited by local guest OS administrators to create an infinite loop that crashes the QEMU process.
Is there a workaround for CVE-2016-7908?
There are no specific workarounds identified for CVE-2016-7908, so updating the software is recommended for protection.