First published: Fri Dec 09 2016(Updated: )
Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
QEMU KVM | <=2.7.1 | |
openSUSE | =42.2 | |
Debian Debian Linux | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-9101 has a medium severity level due to its potential to cause denial of service through memory leak.
To fix CVE-2016-9101, you should update QEMU to a version later than 2.7.1 where the vulnerability is patched.
CVE-2016-9101 affects QEMU versions up to and including 2.7.1, as well as specific versions of openSUSE and Debian Linux.
CVE-2016-9101 is a memory leak vulnerability that can lead to denial of service in the QEMU environment.
Local guest OS administrators are primarily impacted by CVE-2016-9101, as they can exploit the vulnerability by manipulating the NIC device.