{"schemaVersion":3,"id":"SUSE-SU-2016:1785-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for kvm\n\nkvm was updated to fix 33 security issues.\n\nThese security issues were fixed:\n- CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)\n- CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)\n- CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)\n- CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)\n- CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)\n- CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)\n- CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)\n- CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)\n- CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)\n- CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)\n- CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)\n- CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)\n- CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)\n- CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)\n- CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)\n- CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).\n- CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-5279: Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU allowed guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets (bsc#945987).\n- CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).\n- CVE-2015-6855: hw/ide/core.c in QEMU did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).\n- CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).\n- CVE-2015-7549: PCI null pointer dereferences (bsc#958917).\n- CVE-2015-8504: VNC floating point exception (bsc#958491).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).\n- CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).\n- CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).\n- CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).\n- CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).\n- CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).\n- CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).\n- CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).\n\nThis non-security issue was fixed:\n- Fix case of IDE interface needing busy status set before flush (bsc#936132)","dates":{"published":"2016-07-11T11:31:17.000Z","modified":"2026-02-04T04:04:29.519Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kvm&distro=SUSE Linux Enterprise Server 11 SP4","name":"kvm","label":"kvm&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kvm&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 1.4.2-44.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-44.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kvm&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"kvm","label":"kvm&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kvm&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 1.4.2-44.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.2-44.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161785-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20161785-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/895528","label":"bugzilla.suse.com/895528","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/901508","label":"bugzilla.suse.com/901508","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/928393","label":"bugzilla.suse.com/928393","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/934069","label":"bugzilla.suse.com/934069","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/936132","label":"bugzilla.suse.com/936132","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/940929","label":"bugzilla.suse.com/940929","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/944463","label":"bugzilla.suse.com/944463","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/945404","label":"bugzilla.suse.com/945404","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/945987","label":"bugzilla.suse.com/945987","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/945989","label":"bugzilla.suse.com/945989","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/947159","label":"bugzilla.suse.com/947159","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958491","label":"bugzilla.suse.com/958491","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958917","label":"bugzilla.suse.com/958917","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/959005","label":"bugzilla.suse.com/959005","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960334","label":"bugzilla.suse.com/960334","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960725","label":"bugzilla.suse.com/960725","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961332","label":"bugzilla.suse.com/961332","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961333","label":"bugzilla.suse.com/961333","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961358","label":"bugzilla.suse.com/961358","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961556","label":"bugzilla.suse.com/961556","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961691","label":"bugzilla.suse.com/961691","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/962320","label":"bugzilla.suse.com/962320","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/963782","label":"bugzilla.suse.com/963782","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/964413","label":"bugzilla.suse.com/964413","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/967969","label":"bugzilla.suse.com/967969","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/969350","label":"bugzilla.suse.com/969350","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/970036","label":"bugzilla.suse.com/970036","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/970037","label":"bugzilla.suse.com/970037","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/975128","label":"bugzilla.suse.com/975128","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/975136","label":"bugzilla.suse.com/975136","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/975700","label":"bugzilla.suse.com/975700","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/976109","label":"bugzilla.suse.com/976109","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/978158","label":"bugzilla.suse.com/978158","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/978160","label":"bugzilla.suse.com/978160","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/980711","label":"bugzilla.suse.com/980711","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/980723","label":"bugzilla.suse.com/980723","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3615","label":"www.suse.com/security/cve/CVE-2014-3615","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3689","label":"www.suse.com/security/cve/CVE-2014-3689","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9718","label":"www.suse.com/security/cve/CVE-2014-9718","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3214","label":"www.suse.com/security/cve/CVE-2015-3214","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5239","label":"www.suse.com/security/cve/CVE-2015-5239","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5278","label":"www.suse.com/security/cve/CVE-2015-5278","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5279","label":"www.suse.com/security/cve/CVE-2015-5279","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5745","label":"www.suse.com/security/cve/CVE-2015-5745","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6855","label":"www.suse.com/security/cve/CVE-2015-6855","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7295","label":"www.suse.com/security/cve/CVE-2015-7295","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7549","label":"www.suse.com/security/cve/CVE-2015-7549","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","label":"www.suse.com/security/cve/CVE-2015-8504","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8558","label":"www.suse.com/security/cve/CVE-2015-8558","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8613","label":"www.suse.com/security/cve/CVE-2015-8613","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8619","label":"www.suse.com/security/cve/CVE-2015-8619","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8743","label":"www.suse.com/security/cve/CVE-2015-8743","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1568","label":"www.suse.com/security/cve/CVE-2016-1568","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","label":"www.suse.com/security/cve/CVE-2016-1714","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1922","label":"www.suse.com/security/cve/CVE-2016-1922","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1981","label":"www.suse.com/security/cve/CVE-2016-1981","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2198","label":"www.suse.com/security/cve/CVE-2016-2198","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2538","label":"www.suse.com/security/cve/CVE-2016-2538","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2841","label":"www.suse.com/security/cve/CVE-2016-2841","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2857","label":"www.suse.com/security/cve/CVE-2016-2857","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2858","label":"www.suse.com/security/cve/CVE-2016-2858","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3710","label":"www.suse.com/security/cve/CVE-2016-3710","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3712","label":"www.suse.com/security/cve/CVE-2016-3712","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4001","label":"www.suse.com/security/cve/CVE-2016-4001","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4002","label":"www.suse.com/security/cve/CVE-2016-4002","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4020","label":"www.suse.com/security/cve/CVE-2016-4020","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4037","label":"www.suse.com/security/cve/CVE-2016-4037","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4439","label":"www.suse.com/security/cve/CVE-2016-4439","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4441","label":"www.suse.com/security/cve/CVE-2016-4441","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2014-3615","CVE-2014-3689","CVE-2014-9718","CVE-2015-3214","CVE-2015-5239","CVE-2015-5278","CVE-2015-5279","CVE-2015-5745","CVE-2015-6855","CVE-2015-7295","CVE-2015-7549","CVE-2015-8504","CVE-2015-8558","CVE-2015-8613","CVE-2015-8619","CVE-2015-8743","CVE-2016-1568","CVE-2016-1714","CVE-2016-1922","CVE-2016-1981","CVE-2016-2198","CVE-2016-2538","CVE-2016-2841","CVE-2016-2857","CVE-2016-2858","CVE-2016-3710","CVE-2016-3712","CVE-2016-4001","CVE-2016-4002","CVE-2016-4020","CVE-2016-4037","CVE-2016-4439","CVE-2016-4441"],"downstream":[],"duplicates":[],"related":["CVE-2014-3615","CVE-2014-3689","CVE-2014-9718","CVE-2015-3214","CVE-2015-5239","CVE-2015-5278","CVE-2015-5279","CVE-2015-5745","CVE-2015-6855","CVE-2015-7295","CVE-2015-7549","CVE-2015-8504","CVE-2015-8558","CVE-2015-8613","CVE-2015-8619","CVE-2015-8743","CVE-2016-1568","CVE-2016-1714","CVE-2016-1922","CVE-2016-1981","CVE-2016-2198","CVE-2016-2538","CVE-2016-2841","CVE-2016-2857","CVE-2016-2858","CVE-2016-3710","CVE-2016-3712","CVE-2016-4001","CVE-2016-4002","CVE-2016-4020","CVE-2016-4037","CVE-2016-4439","CVE-2016-4441"]},"timeline":[{"kind":"published","date":"2016-07-11T11:31:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:04:29.519Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:24:04.038Z","stale":false,"partial":false}}