CVE-2016-1568: debian debian_linux Use After Free

CVSS: 8.8v3.1HighModified

AliasesUBUNTU-CVE-2016-1568DEBIAN-CVE-2016-1568

Published 08-04-2016Last modified 05-08-2024

Vulnerability summary

CVE-2016-1568 is a high (CVSS 8.8) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.7% of scored vulnerabilities.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (NVD)

EPSS score

0.53%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 10

DSA-3469-1 DSA-3470-1 DSA-3471-1 MGASA-2016-0023 OPENSUSE-SU-2024:10196-1 RHSA-2016:0084+12 more

Timeline

08-04-2016
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.

CVSS metrics

5 scores · 3 sources · 3 versions

v3.18.8v3.08.5v2.06.9

EPSS trend

Probability

0.53%

Chance of exploitation in the next 30 days

Percentile

44%

Versus all other CVEs

30-day change

0.00 pp

From 0.53% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.53%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Debian2 products

qemu< 1:2.5+dfsg-2
debian_linuxEOL7.0 | 8.0

Redhat2 products

openstack6.0 | 7.0 | 5.0
virtualization3.0

Qemu1 product

qemu≤ 2.5.1.1

Ubuntu1 product

qemu< 2.0.0+dfsg-2ubuntu1.22

4 vendors · 6 products

References

18 links

rhn.redhat.com/errata/RHSA-2016-0086.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2016/01/09/2Mailing ListX Refsource MLISTThird Party Advisory
www.securityfocus.com/bid/80191VDB EntryX Refsource BIDThird Party Advisory
git.qemu.org?p=qemu.git%3Ba=commit%3Bh=4ab0359a8ae182a7ac5c99609667273167703fabX Refsource CONFIRM
www.securitytracker.com/id/1034859VDB EntryX Refsource SECTRACKThird Party Advisory
www.debian.org/security/2016/dsa-3469Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2016/dsa-3470Vendor AdvisoryX Refsource DEBIANThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0087.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0084.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2016/dsa-3471Vendor AdvisoryX Refsource DEBIANThird Party Advisory

Show all 18 references

security.gentoo.org/glsa/201602-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-0088.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2016/01/09/1Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
ubuntu.com/security/CVE-2016-1568REPORT
lists.gnu.org/archive/html/qemu-devel/2016-01/msg01184.htmlREPORT
ubuntu.com/security/notices/USN-2891-1Advisory
www.cve.org/CVERecord?id=CVE-2016-1568REPORT
security-tracker.debian.org/tracker/CVE-2016-1568Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities