Bugzilla – Bug 1003612
VUL-0: CVE-2016-7995: qemu: usb: hcd-ehci: memory leak in ehci_process_itd
Last modified: 2017-03-07 22:55:20 UTC
Reference: http://seclists.org/oss-sec/2016/q4/54 =========================== Hello, Qemu emulator(Qemu) built with the USB EHCI emulation support is vulnerable to a memory leakage flaw. It could occur while processing isochronous transfer descriptors(iTD), with buffer page select(PG) index that falls beyond buffer page array area. A privileged user inside guest could use this flaw to leak Qemu memory bytes leading to a DoS on the host. Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg06609.html Reference: ---------- -> https://bugzilla.redhat.com/show_bug.cgi?id=1382668 This issue was reported by Li Qiang of 360.cn Inc. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F ===========================
SLE 12 SP2 only
bugbot adjusting priority
SUSE-SU-2016:2879-1: An update that solves 21 vulnerabilities and has 6 fixes is now available. Category: security (moderate) Bug References: 1000345,1000346,1001151,1002116,1002549,1002550,1002557,1003612,1003613,1003878,1003893,1003894,1004702,1004706,1004707,1005353,1005374,1006536,1006538,1007263,1007391,1007493,1007494,1007495,1007769,1008148,998516 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7422,CVE-2016-7466,CVE-2016-7907,CVE-2016-7908,CVE-2016-7909,CVE-2016-7994,CVE-2016-7995,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8668,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): qemu-2.6.2-31.2 SUSE Linux Enterprise Server 12-SP2 (src): qemu-2.6.2-31.2 SUSE Linux Enterprise Desktop 12-SP2 (src): qemu-2.6.2-31.2
openSUSE-SU-2016:3237-1: An update that solves 21 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1000345,1000346,1001151,1002116,1002549,1002550,1002557,1003612,1003613,1003878,1003893,1003894,1004702,1004706,1004707,1005353,1005374,1006536,1006538,1007391,1007493,1007494,1007495,1007769,1008148,998516 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7422,CVE-2016-7466,CVE-2016-7907,CVE-2016-7908,CVE-2016-7909,CVE-2016-7994,CVE-2016-7995,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8668,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: openSUSE Leap 42.2 (src): qemu-2.6.2-23.1, qemu-linux-user-2.6.2-23.1, qemu-testsuite-2.6.2-23.1
Fixed.