CVE-2016-6833: debian debian_linux Use After Free

Modified

AliasesUBUNTU-CVE-2016-6833DEBIAN-CVE-2016-6833

Published 10-12-2016Last modified 06-08-2024

Vulnerability summary

CVE-2016-6833 is a medium (CVSS 4.4) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 33.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.4/10

010

Medium · v3.1 (NVD)

EPSS score

0.39%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 6

DLA-1497-1 SUSE-SU-2016:2473-1 SUSE-SU-2016:2507-1 SUSE-SU-2016:2533-1 SUSE-SU-2016:2589-1 SUSE-SU-2016:2781-1+1 more

Timeline

10-12-2016
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.

CVSS metrics

5 scores · 3 sources · 3 versions

v3.14.4v3.04.4v2.02.1

EPSS trend

Probability

0.39%

Chance of exploitation in the next 30 days

Percentile

33%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.39% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Version check

Known conditions: local access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Debian2 products

qemu< 1:2.6+dfsg-3.1
debian_linuxEOL8.0

Qemu1 product

qemu≤ 2.6.2 | 2.7.0:rc0 | 2.7.0:rc1 | 2.7.0:rc2

Ubuntu1 product

qemu< 2.0.0+dfsg-2ubuntu1.30 | < 1:2.5+dfsg-5ubuntu10.6

3 vendors · 4 products

References

11 links

www.securityfocus.com/bid/93255VDB EntryX Refsource BIDThird Party Advisory
lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlMailing ListX Refsource MLISTThird Party Advisory
www.openwall.com/lists/oss-security/2016/08/12/1Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.htmlMailing ListX Refsource MLISTPatchThird Party AdvisoryREPORT
security.gentoo.org/glsa/201609-01Vendor AdvisoryX Refsource GENTOOThird Party Advisory
www.openwall.com/lists/oss-security/2016/08/18/3Mailing ListX Refsource MLISTThird Party Advisory
git.qemu.org?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8X Refsource CONFIRM
ubuntu.com/security/CVE-2016-6833REPORT
ubuntu.com/security/notices/USN-3125-1Advisory
www.cve.org/CVERecord?id=CVE-2016-6833REPORT

Show all 11 references

security-tracker.debian.org/tracker/CVE-2016-6833Advisory