Resource management error in qemu (Alpine package)

1) Resource management error

EUVDB-ID: #VU32135

Risk: Low

CVSSv3.1: 5.2 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2016-8910

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local privileged user to a crash the entire system.

The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count. <a href="http://cwe.mitre.org/data/definitions/835.html">CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')</a>

Mitigation

Install update from vendor's website.

Vulnerable software versions

qemu (Alpine package): 2.8.1-r0

External links

http://git.alpinelinux.org/aports/commit/?id=64053e93d1b2192473cc16b8719d43e6b1c036a6
http://git.alpinelinux.org/aports/commit/?id=251f7b99aba7d81c9ef398c6f3ec41f06c2ba661

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.