CVE-2016-7161 — Out-of-bounds Write in Qemu

CWE-787 — Out-of-bounds WriteCWE-122 — Heap-based Buffer Overflow11 documents8 sources
Severity
9.8CRITICALNVD
OSV5.5
EPSS
20.2%
top 4.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
QemuDebian QemuDebian Linux+3 more
Timeline
PublishedOct 5
Latest updateMay 13

Description

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages7 packages

▶debiandebian/qemu< qemu 1:2.7+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:2.7+dfsg-1+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.30+1
▶NVDqemu/qemu2.6.2+1

Also affects: Debian Linux 8.0

Patches

Patch: lists.gnu.org ↗Patch: lists.gnu.org ↗Patch: lists.gnu.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-9mvr-f38r-9r65: Heap-based buffer overflow in the↗2022-05-13
▶
OSV
qemu, qemu-kvm vulnerabilities↗2016-11-09
▶
OSV
CVE-2016-7161: Heap-based buffer overflow in the↗2016-10-05
▶

📋Vendor Advisories

4
Ubuntu
QEMU vulnerabilities↗2016-11-09
▶
Microsoft
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.↗2016-10-11
▶
Red Hat
Qemu: net: xilinx_ethlite: heap buffer overflow in eth_rx↗2016-09-23
▶
Debian
CVE-2016-7161: qemu - Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in ...↗2016
▶

💬Community

3
Bugzilla
CVE-2016-7161 qemu: hw: net: Heap overflow in xlnx.xps-ethernetlite [fedora-all]↗2016-09-26
▶
Bugzilla
CVE-2016-7161 Qemu: net: xilinx_ethlite: heap buffer overflow in eth_rx↗2016-09-26
▶
Bugzilla
CVE-2016-7161 xen: qemu: hw: net: Heap overflow in xlnx.xps-ethernetlite [fedora-all]↗2016-09-26
▶