vulnwire
5.5med

CVE-2016-1981

QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue.

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 39%
Public exploits
0
none known

QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.15.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD2.02.1AV:L/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-835 Loop with Unreachable Exit Condition

References

  • lists.gnu.org /archive/html/qemu-devel/2016-01/msg03454.html · mailing-list, x_refsource_MLIST, x_transferred
  • security.gentoo.org /glsa/201604-01 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • debian.org /security/2016/dsa-3469 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • debian.org /security/2016/dsa-3470 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • openwall.com /lists/oss-security/2016/01/19/10 · mailing-list, x_refsource_MLIST, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=1298570 · x_refsource_CONFIRM, x_transferred
  • openwall.com /lists/oss-security/2016/01/22/1 · mailing-list, x_refsource_MLIST, x_transferred
  • rhn.redhat.com /errata/RHSA-2016-2585.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • debian.org /security/2016/dsa-3471 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securityfocus.com /bid/81549 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.