{"schemaVersion":3,"id":"SUSE-SU-2017:0127-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for qemu\n\n\nqemu was updated to fix several issues.\n\nThese security issues were fixed:\n\n- CVE-2016-9102: Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) via a large number of Txattrcreate messages with the same fid number (bsc#1014256).\n- CVE-2016-9103: The v9fs_xattrcreate function in hw/9pfs/9p.c in allowed local guest OS administrators to obtain sensitive host heap memory information by reading xattribute values writing to them (bsc#1007454).\n- CVE-2016-9381: Improper processing of shared rings allowing guest administrators take over the qemu process, elevating their privilege to that of the qemu process (bsc#1009109)\n- CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013285).\n- CVE-2016-9845: The Virtio GPU Device emulator support as vulnerable to an information leakage issue while processing the 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could have used this flaw to leak contents of the host memory (bsc#1013767).\n- CVE-2016-9846: The Virtio GPU Device emulator support was vulnerable to a memory leakage issue while updating the cursor data in update_cursor_data_virgl. A guest user/process could have used this flaw to leak host memory bytes, resulting in DoS for the host (bsc#1013764).\n- CVE-2016-9907: The USB redirector usb-guest support was vulnerable to a memory leakage flaw when destroying the USB redirector in 'usbredir_handle_destroy'.  A guest user/process could have used this issue to leak host memory, resulting in DoS for a host (bsc#1014109).\n- CVE-2016-9908: The Virtio GPU Device emulator support was vulnerable to an information leakage issue while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command. A guest user/process could have used this flaw to leak contents of the host memory (bsc#1014514).\n- CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in 'ehci_init_transfer'. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014111).\n- CVE-2016-9912: The Virtio GPU Device emulator support was vulnerable to a memory leakage issue while destroying gpu resource object in 'virtio_gpu_resource_destroy'. A guest user/process could have used this flaw to leak host memory bytes, resulting in DoS for the host (bsc#1014112).\n- CVE-2016-9913: VirtFS was vulnerable to memory leakage issue via its '9p-handle' or '9p-proxy' backend drivers. A privileged user inside guest could have used this flaw to leak host memory, thus affecting other services on the host and/or potentially crash the Qemu process on the host (bsc#1014110).\n\nThese non-security issues were fixed:\n\n- Fixed uint64 property parsing and add regression tests (bsc#937125)\n- Added a man page for kvm_stat\n- Fix crash in vte (bsc#1008519)\n- Various upstream commits targeted towards stable releases (bsc#1013341)","dates":{"published":"2017-01-13T15:30:43.000Z","modified":"2026-02-04T04:31:19.819Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"qemu&distro=SUSE Linux Enterprise Desktop 12 SP2","name":"qemu","label":"qemu&distro=SUSE Linux Enterprise Desktop 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/qemu&distro=SUSE Linux Enterprise Desktop 12 SP2","purlType":"rpm","versions":[{"text":"< 2.6.2-39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.2-39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"qemu&distro=SUSE Linux Enterprise Server 12 SP2","name":"qemu","label":"qemu&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/qemu&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 2.6.2-39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.2-39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"qemu&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"qemu","label":"qemu&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/qemu&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 2.6.2-39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.2-39.1","eol":null,"hubHref":null},{"vendor":"suse","product":"qemu&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"qemu","label":"qemu&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/qemu&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 2.6.2-39.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.2-39.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170127-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20170127-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1007454","label":"bugzilla.suse.com/1007454","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1008519","label":"bugzilla.suse.com/1008519","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1009109","label":"bugzilla.suse.com/1009109","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1013285","label":"bugzilla.suse.com/1013285","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1013341","label":"bugzilla.suse.com/1013341","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1013764","label":"bugzilla.suse.com/1013764","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1013767","label":"bugzilla.suse.com/1013767","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014109","label":"bugzilla.suse.com/1014109","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014110","label":"bugzilla.suse.com/1014110","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014111","label":"bugzilla.suse.com/1014111","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014112","label":"bugzilla.suse.com/1014112","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014256","label":"bugzilla.suse.com/1014256","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1014514","label":"bugzilla.suse.com/1014514","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1016779","label":"bugzilla.suse.com/1016779","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/937125","label":"bugzilla.suse.com/937125","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9102","label":"www.suse.com/security/cve/CVE-2016-9102","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9103","label":"www.suse.com/security/cve/CVE-2016-9103","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9381","label":"www.suse.com/security/cve/CVE-2016-9381","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9776","label":"www.suse.com/security/cve/CVE-2016-9776","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9845","label":"www.suse.com/security/cve/CVE-2016-9845","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9846","label":"www.suse.com/security/cve/CVE-2016-9846","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9907","label":"www.suse.com/security/cve/CVE-2016-9907","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9908","label":"www.suse.com/security/cve/CVE-2016-9908","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9911","label":"www.suse.com/security/cve/CVE-2016-9911","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9912","label":"www.suse.com/security/cve/CVE-2016-9912","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9913","label":"www.suse.com/security/cve/CVE-2016-9913","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9921","label":"www.suse.com/security/cve/CVE-2016-9921","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9922","label":"www.suse.com/security/cve/CVE-2016-9922","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-9102","CVE-2016-9103","CVE-2016-9381","CVE-2016-9776","CVE-2016-9845","CVE-2016-9846","CVE-2016-9907","CVE-2016-9908","CVE-2016-9911","CVE-2016-9912","CVE-2016-9913","CVE-2016-9921","CVE-2016-9922"],"downstream":[],"duplicates":[],"related":["CVE-2016-9102","CVE-2016-9103","CVE-2016-9381","CVE-2016-9776","CVE-2016-9845","CVE-2016-9846","CVE-2016-9907","CVE-2016-9908","CVE-2016-9911","CVE-2016-9912","CVE-2016-9913","CVE-2016-9921","CVE-2016-9922"]},"timeline":[{"kind":"published","date":"2017-01-13T15:30:43.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:31:19.819Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:58:28.716Z","stale":false,"partial":false}}