CVE-2016-8668: Medium severity qemu vulnerability
The rockeriowritel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8668?
CVE-2016-8668 has been classified as a high severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2016-8668?
To mitigate CVE-2016-8668, update QEMU to a version later than 2.7.1 or apply any available patches.
Who is affected by CVE-2016-8668?
CVE-2016-8668 affects local guest OS administrators using QEMU versions up to and including 2.7.1.
What is the nature of the vulnerability in CVE-2016-8668?
CVE-2016-8668 involves an out-of-bounds read vulnerability in the rocker_io_writel function that can lead to a QEMU process crash.
What kind of attack can exploit CVE-2016-8668?
An attacker can exploit CVE-2016-8668 by leveraging the improper handling of DMA buffer sizes to crash the QEMU process.