Vulnerability Description
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Openstack | 5.0 |
| Oracle | Linux | 6 |
| Qemu | Qemu | <= 2.3.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2016-0081.html
- http://rhn.redhat.com/errata/RHSA-2016-0082.html
- http://rhn.redhat.com/errata/RHSA-2016-0083.html
- http://rhn.redhat.com/errata/RHSA-2016-0084.html
- http://rhn.redhat.com/errata/RHSA-2016-0085.htmlIssue TrackingThird Party AdvisoryVDB Entry
- http://rhn.redhat.com/errata/RHSA-2016-0086.html
- http://rhn.redhat.com/errata/RHSA-2016-0087.html
- http://rhn.redhat.com/errata/RHSA-2016-0088.htmlIssue TrackingThird Party AdvisoryVDB Entry
- http://www.debian.org/security/2016/dsa-3469
- http://www.debian.org/security/2016/dsa-3470
- http://www.debian.org/security/2016/dsa-3471
- http://www.openwall.com/lists/oss-security/2016/01/11/7Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/01/12/10Third Party Advisory
- http://www.openwall.com/lists/oss-security/2016/01/12/11Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.hThird Party Advisory
FAQ
What is CVE-2016-1714?
CVE-2016-1714 is a vulnerability with a CVSS score of 8.1 (HIGH). The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_R...
How severe is CVE-2016-1714?
CVE-2016-1714 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-1714?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Openstack, Oracle Linux, Qemu Qemu.