crítica
CVE-2016-9603
Qemu: cirrus: heap buffer overflow via vnc connection
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Red Hat5.5CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), Oracle (alta), Ubuntu (media).
Descripción
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | xen | 4.7.2-r0 |
| alpine 3.11 | xen | 4.7.2-r0 |
| alpine 3.12 | xen | 4.7.2-r0 |
| alpine 3.13 | xen | 4.7.2-r0 |
| alpine 3.14 | xen | 4.7.2-r0 |
| alpine 3.15 | xen | 4.7.2-r0 |
| alpine 3.16 | xen | 4.7.2-r0 |
| alpine 3.17 | xen | 4.7.2-r0 |
| alpine 3.18 | xen | 4.7.2-r0 |
| alpine 3.19 | xen | 4.7.2-r0 |
| alpine 3.20 | xen | 4.7.2-r0 |
| alpine 3.21 | xen | 4.7.2-r0 |
Mostrar las 52 entradas de 38 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.10 | xen | 4.7.2-r0 |
| alpine 3.11 | xen | 4.7.2-r0 |
| alpine 3.12 | xen | 4.7.2-r0 |
| alpine 3.13 | xen | 4.7.2-r0 |
| alpine 3.14 | xen | 4.7.2-r0 |
| alpine 3.15 | xen | 4.7.2-r0 |
| alpine 3.16 | xen | 4.7.2-r0 |
| alpine 3.17 | xen | 4.7.2-r0 |
| alpine 3.18 | xen | 4.7.2-r0 |
| alpine 3.19 | xen | 4.7.2-r0 |
| alpine 3.20 | xen | 4.7.2-r0 |
| alpine 3.21 | xen | 4.7.2-r0 |
| alpine 3.22 | xen | 4.7.2-r0 |
| alpine 3.23 | xen | 4.7.2-r0 |
| alpine 3.24 | xen | 4.7.2-r0 |
| alpine 3.4 | xen | 4.6.3-r8 |
| alpine 3.5 | xen | 4.7.2-r0 |
| alpine 3.6 | xen | 4.7.2-r0 |
| alpine 3.7 | xen | 4.7.2-r0 |
| alpine 3.8 | xen | 4.7.2-r0 |
| alpine 3.9 | xen | 4.7.2-r0 |
| alpine edge | xen | 4.7.2-r0 |
| debian 11 | qemu | 1:2.8+dfsg-4 |
| debian 11 | xen | 4.4.0-1 |
| debian 12 | qemu | 1:2.8+dfsg-4 |
| debian 12 | xen | 4.4.0-1 |
| debian 13 | qemu | 1:2.8+dfsg-4 |
| debian 13 | xen | 4.4.0-1 |
| debian 14 | qemu | 1:2.8+dfsg-4 |
| debian 14 | xen | 4.4.0-1 |
| debian 7 | qemu | 1.1.2+dfsg-6+deb7u22 |
| debian 7 | qemu-kvm | 1.1.2+dfsg-6+deb7u21 |
| debian 7 | xen | 4.1.6.lts1-12 |
| debian 8 | qemu | 1:2.1+dfsg-12+deb8u7 |
| echo | qemu | 1:2.8+dfsg-4 |
| echo | xen | 4.4.0-1 |
| Oracle Linux 6 | qemu-guest-agent | 2:0.12.1.2-2.503.el6_9.3 |
| Oracle Linux 6 | qemu-img | 2:0.12.1.2-2.503.el6_9.3 |
| Oracle Linux 6 | qemu-kvm | 2:0.12.1.2-2.503.el6_9.3 |
| Oracle Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.503.el6_9.3 |
| Oracle Linux 7 | qemu-img | 10:1.5.3-126.el7_3.6 |
| Oracle Linux 7 | qemu-kvm | 10:1.5.3-126.el7_3.6 |
| Oracle Linux 7 | qemu-kvm-common | 10:1.5.3-126.el7_3.6 |
| Oracle Linux 7 | qemu-kvm-tools | 10:1.5.3-126.el7_3.6 |
| Red Hat | qemu-kvm-rhev | sin corrección indicada |
| ubuntu 14.04 | qemu | 2.0.0+dfsg-2ubuntu1.33 |
| ubuntu 14.04 | xen | 4.4.2-0ubuntu0.14.04.11 |
| ubuntu 14.04-ESM | qemu | 2.0.0+dfsg-2ubuntu1.33 |
| ubuntu 16.04 | qemu | 1:2.5+dfsg-5ubuntu10.11 |
| ubuntu 16.04-ESM | qemu | 1:2.5+dfsg-5ubuntu10.11 |
| ubuntu 16.10 | qemu | 1:2.6.1+dfsg-0ubuntu5.4 |
| ubuntu 17.04 | qemu | 1:2.8+dfsg-3ubuntu2.1 |
Referencias
- http://www.openwall.com/lists/oss-security/2017/03/14/2
- http://www.securityfocus.com/bid/96893
- http://www.securitytracker.com/id/1038023
- https://access.redhat.com/errata/RHSA-2017:0980
- https://access.redhat.com/errata/RHSA-2017:0981
- https://access.redhat.com/errata/RHSA-2017:0982
- https://access.redhat.com/errata/RHSA-2017:0983
- https://access.redhat.com/errata/RHSA-2017:0984
Las 27 referencias
- https://access.redhat.com/errata/RHSA-2017:0985
- https://access.redhat.com/errata/RHSA-2017:0987
- https://access.redhat.com/errata/RHSA-2017:0988
- https://access.redhat.com/errata/RHSA-2017:1205
- https://access.redhat.com/errata/RHSA-2017:1206
- https://access.redhat.com/errata/RHSA-2017:1441
- https://access.redhat.com/security/cve/CVE-2016-9603
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603
- https://linux.oracle.com/cve/CVE-2016-9603.html
- https://linux.oracle.com/errata/ELSA-2017-1206.html
- https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-9603
- https://security.gentoo.org/glsa/201706-03
- https://support.citrix.com/article/CTX221578
- https://ubuntu.com/security/notices/USN-3261-1
- https://ubuntu.com/security/notices/USN-3268-1
- https://www.cve.org/CVERecord?id=CVE-2016-9603
- https://www.mail-archive.com/qemu-devel@nongnu.org/msg437188.html