CVE-2016-7161

NameCVE-2016-7161
DescriptionHeap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-1599-1, DLA-652-1, DLA-653-1
NVD severityhigh (attack range: remote)
Debian Bugs838850

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
qemu (PTS)jessie1:2.1+dfsg-12+deb8u6vulnerable
jessie (security)1:2.1+dfsg-12+deb8u11fixed
stretch (security), stretch1:2.8+dfsg-6+deb9u8fixed
buster1:3.1+dfsg-8~deb10u1fixed
buster (security)1:3.1+dfsg-8+deb10u2fixed
bullseye, sid1:4.1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
qemusource(unstable)1:2.7+dfsg-1high838850
qemusourcejessie1:2.1+dfsg-12+deb8u8highDLA-1599-1
qemusourcewheezy1.1.2+dfsg-6+deb7u16highDLA-652-1
qemu-kvmsource(unstable)(unfixed)high
qemu-kvmsourcewheezy1.1.2+dfsg-6+deb7u16highDLA-653-1

Notes

http://git.qemu.org/?p=qemu.git;a=commit;h=a0d1cbdacff5df4ded16b753b38fdd9da6092968 (2.7.0-rc3)
http://patchwork.ozlabs.org/patch/657076/

Search for package or bug name: Reporting problems