This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-6490 →

DEBIAN-CVE-2016-6490

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (...

Original description

The description as published by the source.

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6+dfsg-3.1"}]}]

Debian:13 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6+dfsg-3.1"}]}]

Debian:14 qemu

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6+dfsg-3.1"}]}]

References

advisory security-tracker.debian.org