QEMU - Security Update (CVE-2016-7161, CVE-2016-7170, CVE-2016-7908)
Summary
DLA-652-1: qemu - security update. Affects qemu versions < 1.1.2+dfsg-6+deb7u16. Fixed in 1.1.2+dfsg-6+deb7u16. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
QEMU is a fast and portable open-source machine emulator and virtualizer. It provides support for executing operating systems and programs written for one machine on a different machine. QEMU is widely used in the virtualization industry and is known for its flexibility and compatibility with various architectures and operating systems.
Vulnerability Detail
Multiple vulnerabilities have been discovered in QEMU. The first vulnerability, CVE-2016-7161, is a heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite, allowing attackers to execute arbitrary code on the QEMU host by sending a large ethlite packet. The second vulnerability, CVE-2016-7170, is an out-of-bounds memory access in the vmsvga_fifo_run function of hw/display/vmware_vga.c, which can be exploited to gain unauthorized access to QEMU's memory. The third vulnerability, CVE-2016-7908, is a denial-of-service vulnerability caused by improper handling of buffer descriptor counts in the mcf_fec_do_tx function of hw/net/mcf_fec.c. This vulnerability allows local guest OS administrators to crash the QEMU process by sending crafted packets with a length of 0 and manipulated bd.flags values.
How To Fix
Minimum fixed version
1.1.2+dfsg-6+deb7u16
This is the first release that contains the fix.
sudo apt-get install --only-upgrade qemuTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workarounds have been provided for these vulnerabilities.
Conclusion
Multiple vulnerabilities have been identified in QEMU, including heap-based buffer overflow, out-of-bounds memory access, and denial-of-service vulnerabilities. It is crucial to upgrade your QEMU packages to the recommended version to mitigate these risks. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for qemu →
FAQ
QEMU is an open-source machine emulator and virtualizer that allows executing operating systems and programs written for one machine on a different machine.
CVE-2016-7161 is a heap-based buffer overflow vulnerability in the .receive callback of xlnx.xps-ethernetlite in QEMU, allowing arbitrary code execution on the QEMU host.
CVE-2016-7170 is an out-of-bounds memory access vulnerability in the vmsvga_fifo_run function of hw/display/vmware_vga.c in QEMU, which can lead to unauthorized access to QEMU's memory.
CVE-2016-7908 is a denial-of-service vulnerability in the mcf_fec_do_tx function of hw/net/mcf_fec.c in QEMU, allowing local guest OS administrators to crash the QEMU process by sending crafted packets.
To fix these vulnerabilities, you should upgrade your QEMU packages to version 1.1.2+dfsg-6+deb7u16 or later.
Related vulnerabilities
Recent vulnerabilities recorded for qemu.
