CVE-2016-7161

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a0d1cbdacff5df4ded16b753b38fdd9da6092968
http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/8
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93141
Broken Link
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01598.html
Mailing List
Patch
Vendor Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01877.html
Mailing List
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201611-11
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a0d1cbdacff5df4ded16b753b38fdd9da6092968
http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/8
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93141
Broken Link
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01598.html
Mailing List
Patch
Vendor Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01877.html
Mailing List
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201611-11
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.6.2 (включая)

cpe:2.3:a:qemu:qemu:2.7.0:rc0:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.7.0:rc1:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.7.0:rc2:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.05178

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2016-7161

CVSS3: 9.8

ubuntu

больше 8 лет назад

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

CVE-2016-7161

CVSS3: 7.1

redhat

почти 9 лет назад

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

CVE-2016-7161

CVSS3: 9.8

msrc

больше 4 лет назад

Описание отсутствует

CVE-2016-7161

CVSS3: 9.8

debian

больше 8 лет назад

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethern ...

GHSA-9mvr-f38r-9r65

CVSS3: 9.8

github

около 3 лет назад

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

EPSS

Процентиль: 89%

0.05178

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787