CVE Vulnerabilities

CVE-2016-9921

Divide By Zero

Published: Dec 23, 2016 | Modified: Feb 13, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
2.3 LOW
AV:A/AC:M/Au:S/C:N/I:N/A:P
RedHat/V3
3 LOW
CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Ubuntu
LOW

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Qemu Qemu * 2.7.1 (including)
Qemu Qemu 2.8.0-rc0 (including) 2.8.0-rc0 (including)
Qemu Qemu 2.8.0-rc1 (including) 2.8.0-rc1 (including)
Qemu Qemu 2.8.0-rc2 (including) 2.8.0-rc2 (including)
Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat OpenStack Platform 10.0 (Newton) RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat OpenStack Platform 11.0 (Ocata) RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat OpenStack Platform 8.0 (Liberty) RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat OpenStack Platform 9.0 (Mitaka) RedHat qemu-kvm-rhev-10:2.9.0-10.el7 *
Red Hat Virtualization 4 for Red Hat Enterprise Linux 7 RedHat qemu-kvm-rhev-10:2.9.0-14.el7 *
Qemu Ubuntu trusty *
Qemu Ubuntu upstream *
Qemu Ubuntu xenial *
Qemu Ubuntu yakkety *
Qemu-kvm Ubuntu precise *
Qemu-kvm Ubuntu precise/esm *
Qemu-kvm Ubuntu upstream *

References