CVE-2016-8910: Medium severity qemu vulnerability
Quick Emulator(Qemu) built with the RTL8139 ethernet controller emulation support is vulnerable to an infinite loop issue. It could occur while transmitting packets in C+ mode of operation.
A privileged user inside guest could use this flaw to consume excessive CPU cycles on the host, resulting in DoS situation.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg05495.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/10/24/5
Other sources
The rtl8139cplustransmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8910?
CVE-2016-8910 has been classified as a denial of service vulnerability that can lead to an infinite loop and high CPU consumption.
How do I fix CVE-2016-8910?
To fix CVE-2016-8910, update QEMU to a version above 2.7.1 or apply patches provided by your Linux distribution.
Which software is affected by CVE-2016-8910?
CVE-2016-8910 affects QEMU versions up to 2.7.1 and specific versions of Debian, openSUSE, and Red Hat OpenStack.
What are the potential consequences of CVE-2016-8910?
The potential consequences of CVE-2016-8910 include service disruption for guest operating systems due to high CPU usage.
Who can exploit CVE-2016-8910?
Local guest OS administrators can exploit CVE-2016-8910 by leveraging the failure to limit the ring descriptor count.