CVE-2016-9922: Divide by Zero
The cirrusdocopy function in hw/display/cirrusvga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9922?
CVE-2016-9922 has a high severity level as it allows local guest OS privileged users to crash the QEMU process.
How do I fix CVE-2016-9922?
To fix CVE-2016-9922, you should update QEMU to version 2.8.0 or later, which addresses this vulnerability.
What causes the vulnerability CVE-2016-9922?
CVE-2016-9922 is caused by a divide-by-zero error in the cirrus_do_copy function when using cirrus graphics mode in QEMU.
Who is affected by CVE-2016-9922?
Local guest OS privileged users running vulnerable versions of QEMU are affected by CVE-2016-9922.
Is CVE-2016-9922 specific to a certain version of QEMU?
Yes, CVE-2016-9922 affects QEMU versions up to and including 2.7.1 and specific release candidates of version 2.8.0.