SB2016110407 - Input validation error in QEMU

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2016110407

SB2016110407 - Input validation error in QEMU

Published: November 4, 2016 Updated: July 28, 2020

Security Bulletin ID SB2016110407
Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: CVE-2016-8909)

The vulnerability allows local guest OS administrators to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References