Description
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1756.html ↗
- http://xenbits.xen.org/xsa/advisory-184.html ↗
- http://www.ubuntu.com/usn/USN-3047-1 ↗
- http://rhn.redhat.com/errata/RHSA-2016-1655.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1358359 ↗
- http://rhn.redhat.com/errata/RHSA-2016-1763.html ↗
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html ↗
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1585.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1653.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1607.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1654.html ↗
- http://www.securitytracker.com/id/1036476 ↗
- http://www.ubuntu.com/usn/USN-3047-2 ↗
- http://rhn.redhat.com/errata/RHSA-2016-1606.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1586.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-1943.html ↗
- http://www.securityfocus.com/bid/92148 ↗
- http://rhn.redhat.com/errata/RHSA-2016-1652.html ↗
- https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html ↗