CVE-2016-8667: Divide by Zero
The rc4030write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8667?
CVE-2016-8667 is classified as a medium-severity vulnerability because it allows denial of service through a divide-by-zero error resulting in QEMU crash.
How do I fix CVE-2016-8667?
To fix CVE-2016-8667, you should update QEMU to version 2.9.0 or later, or apply any patches provided by your operating system vendor.
Who is affected by CVE-2016-8667?
CVE-2016-8667 affects local guest OS administrators running QEMU versions up to 2.8.1.1 and 2.9.0 release candidate.
What systems are impacted by CVE-2016-8667?
Systems impacted by CVE-2016-8667 include QEMU KVM on various platforms, as well as openSUSE and Debian versions mentioned in the vulnerability report.
What type of attack is associated with CVE-2016-8667?
The attack associated with CVE-2016-8667 can be described as a denial-of-service attack due to the exploitation of a divide-by-zero error.