CVE-2016-8669: Divide by Zero
Quick Emulator(Qemu) built with the 16550A UART emulation support is vulnerable to a divide by zero issue. It could occur while updating serial device parameters in 'serialupdateparameters'.
A privileged guest user could use this flaw to crash the Qemu process instance on the host, resulting in DoS.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02461.html
Other sources
The serialupdateparameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8669?
CVE-2016-8669 is considered a high severity vulnerability due to its potential for denial of service.
How do I fix CVE-2016-8669?
To fix CVE-2016-8669, upgrade QEMU to version 2.7.1 or later.
Who is affected by CVE-2016-8669?
CVE-2016-8669 affects users of QEMU versions up to 2.7.1, as well as various versions of Red Hat OpenStack and openSUSE.
What type of attack does CVE-2016-8669 allow?
CVE-2016-8669 allows local guest OS administrators to perform a denial of service attack via a divide-by-zero error.
What software versions are vulnerable to CVE-2016-8669?
QEMU versions up to and including 2.7.1, along with certain versions of Red Hat OpenStack and openSUSE are vulnerable to CVE-2016-8669.