Bugzilla – Bug 1000345
VUL-0: CVE-2016-7466: qemu: usb: xhci memory leakage during device unplug
Last modified: 2017-03-08 16:47:48 UTC
rh#1377837 Quick Emulator(Qemu) built with the USB xHCI controller emulation support is vulnerable to a memory leakage issue. It could occur while doing a USB device unplug operation; Doing so repeatedly would result in leaking host memory, affecting other services on the host. A privileged user inside guest could use this flaw to cause a DoS on the host and/or potentially crash the Qemu process instance on the host. Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg02773.html Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/09/19/8 References: https://bugzilla.redhat.com/show_bug.cgi?id=1377837 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-7466 http://seclists.org/oss-sec/2016/q3/575 http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-7466.html
bugbot adjusting priority
SUSE-SU-2016:2879-1: An update that solves 21 vulnerabilities and has 6 fixes is now available. Category: security (moderate) Bug References: 1000345,1000346,1001151,1002116,1002549,1002550,1002557,1003612,1003613,1003878,1003893,1003894,1004702,1004706,1004707,1005353,1005374,1006536,1006538,1007263,1007391,1007493,1007494,1007495,1007769,1008148,998516 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7422,CVE-2016-7466,CVE-2016-7907,CVE-2016-7908,CVE-2016-7909,CVE-2016-7994,CVE-2016-7995,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8668,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (src): qemu-2.6.2-31.2 SUSE Linux Enterprise Server 12-SP2 (src): qemu-2.6.2-31.2 SUSE Linux Enterprise Desktop 12-SP2 (src): qemu-2.6.2-31.2
SUSE-SU-2016:2988-1: An update that solves 19 vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1000345,1001151,1002116,1002550,1002557,1003878,1003893,1003894,1004702,1004707,1006536,1006538,1007391,1007450,1007454,1007493,1007494,1007495,996524,998516,999661 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7421,CVE-2016-7466,CVE-2016-7908,CVE-2016-7909,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9102,CVE-2016-9103,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: SUSE Linux Enterprise Server 12-SP1 (src): qemu-2.3.1-24.6 SUSE Linux Enterprise Desktop 12-SP1 (src): qemu-2.3.1-24.6
openSUSE-SU-2016:3103-1: An update that solves 19 vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1000345,1001151,1002116,1002550,1002557,1003878,1003893,1003894,1004702,1004707,1006536,1006538,1007391,1007450,1007454,1007493,1007494,1007495,996524,998516,999661 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7421,CVE-2016-7466,CVE-2016-7908,CVE-2016-7909,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9102,CVE-2016-9103,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: openSUSE Leap 42.1 (src): qemu-2.3.1-22.1, qemu-linux-user-2.3.1-22.1, qemu-testsuite-2.3.1-22.2
openSUSE-SU-2016:3237-1: An update that solves 21 vulnerabilities and has 5 fixes is now available. Category: security (moderate) Bug References: 1000345,1000346,1001151,1002116,1002549,1002550,1002557,1003612,1003613,1003878,1003893,1003894,1004702,1004706,1004707,1005353,1005374,1006536,1006538,1007391,1007493,1007494,1007495,1007769,1008148,998516 CVE References: CVE-2016-7161,CVE-2016-7170,CVE-2016-7422,CVE-2016-7466,CVE-2016-7907,CVE-2016-7908,CVE-2016-7909,CVE-2016-7994,CVE-2016-7995,CVE-2016-8576,CVE-2016-8577,CVE-2016-8578,CVE-2016-8667,CVE-2016-8668,CVE-2016-8669,CVE-2016-8909,CVE-2016-8910,CVE-2016-9101,CVE-2016-9104,CVE-2016-9105,CVE-2016-9106 Sources used: openSUSE Leap 42.2 (src): qemu-2.6.2-23.1, qemu-linux-user-2.6.2-23.1, qemu-testsuite-2.6.2-23.1
Fixed.