CVE-2016-9911: Medium severity qemu vulnerability
Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
Other sources
Quick Emulator(Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'.
A guest user/process could use this issue to leak host memory, resulting in DoS for a host.
Upstream patch: --------------- -> http://git.qemu.org/?p=qemu.git;a=commitdiff;h=791f97758e223de3290592d
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/12/06/10
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9911?
CVE-2016-9911 has been classified with a severity level that indicates it can lead to memory leakage causing denial of service.
How do I fix CVE-2016-9911?
To fix CVE-2016-9911, update QEMU to a version beyond 2.7.1 that includes the security patches.
Who is affected by CVE-2016-9911?
CVE-2016-9911 affects users running QEMU versions up to 2.7.1 with USB EHCI Emulation support enabled.
What impact does CVE-2016-9911 have?
CVE-2016-9911 can cause a denial of service by allowing a guest user to leak host memory.
Is CVE-2016-9911 a remote vulnerability?
Yes, CVE-2016-9911 can be exploited by guest users within a virtual environment.