NetSight
IP …
medium5.5

CVE-2016-5403

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process…

Impact

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04
OracleLinux
Versions 5, 6, 7
OracleVm Server
Version 3.4
QemuQemu
through 2.6.0
Version 2.7.0
DebianDebian Linux
Version 8.0
RedhatOpenstack
Versions 5.0, 6.0, 7.0, 8, 9
RedhatVirtualization
Version 3.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 7.2, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.2, 7.3, 7.6, 7.7

Weakness classification

CWE-400

References