CVE-2016-2858 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-2858 Interim 1 19 2023-12-09T01:18:51Z current 2021-05-30T13:40:16Z 2023-12-09T01:18:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-2858 QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-June/002109.html E-Mail link for SUSE-SU-2016:1560-1 https://lists.suse.com/pipermail/sle-security-updates/2016-June/002140.html E-Mail link for SUSE-SU-2016:1698-1 https://lists.suse.com/pipermail/sle-security-updates/2016-June/002141.html E-Mail link for SUSE-SU-2016:1703-1 https://lists.suse.com/pipermail/sle-security-updates/2016-July/002154.html E-Mail link for SUSE-SU-2016:1785-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SSRKERVXT73P7DSZ6HZX7CRK2ECW4YU5/#SSRKERVXT73P7DSZ6HZX7CRK2ECW4YU5 E-Mail link for openSUSE-SU-2016:1750-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 kvm-1.4.2-44.1 kvm-1.4.2-46.1 qemu-2.0.2-48.19.1 qemu-2.3.1-14.1 qemu-block-curl-2.0.2-48.19.1 qemu-block-curl-2.3.1-14.1 qemu-block-rbd-2.0.2-48.19.1 qemu-block-rbd-2.3.1-14.1 qemu-guest-agent-2.0.2-48.19.1 qemu-guest-agent-2.3.1-14.1 qemu-ipxe-1.0.0-14.1 qemu-ipxe-1.0.0-48.19.1 qemu-kvm-2.0.2-48.19.1 qemu-kvm-2.3.1-14.1 qemu-lang-2.0.2-48.19.1 qemu-lang-2.3.1-14.1 qemu-ppc-2.0.2-48.19.1 qemu-ppc-2.3.1-14.1 qemu-s390-2.0.2-48.19.1 qemu-s390-2.3.1-14.1 qemu-seabios-1.7.4-48.19.1 qemu-seabios-1.8.1-14.1 qemu-sgabios-8-14.1 qemu-sgabios-8-48.19.1 qemu-tools-2.0.2-48.19.1 qemu-tools-2.3.1-14.1 qemu-vgabios-1.7.4-48.19.1 qemu-vgabios-1.8.1-14.1 qemu-x86-2.0.2-48.19.1 qemu-x86-2.3.1-14.1 qemu-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-block-curl-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-ipxe-1.0.0-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-kvm-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-seabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-sgabios-8-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-tools-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-vgabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-x86-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Desktop 12 qemu-2.3.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-block-curl-2.3.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-ipxe-1.0.0-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-kvm-2.3.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-seabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-sgabios-8-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-tools-2.3.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-vgabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 qemu-x86-2.3.1-14.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 kvm-1.4.2-46.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS kvm-1.4.2-46.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA kvm-1.4.2-44.1 as a component of SUSE Linux Enterprise Server 11 SP4 qemu-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-curl-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-block-rbd-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-guest-agent-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-ipxe-1.0.0-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-kvm-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-lang-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-ppc-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-s390-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-seabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-sgabios-8-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-tools-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-vgabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-x86-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server 12 qemu-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-block-curl-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-block-rbd-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-guest-agent-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-ipxe-1.0.0-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-kvm-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-lang-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-ppc-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-s390-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-seabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-sgabios-8-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-tools-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-vgabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 qemu-x86-2.3.1-14.1 as a component of SUSE Linux Enterprise Server 12 SP1 kvm-1.4.2-44.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 qemu-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-curl-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-block-rbd-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-guest-agent-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ipxe-1.0.0-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-kvm-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-lang-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-ppc-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-s390-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-seabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-sgabios-8-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-tools-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-vgabios-1.7.4-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-x86-2.0.2-48.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 qemu-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-block-curl-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-block-rbd-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-guest-agent-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-ipxe-1.0.0-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-kvm-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-lang-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-ppc-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-s390-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-seabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-sgabios-8-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-tools-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-vgabios-1.8.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 qemu-x86-2.3.1-14.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption. CVE-2016-2858 SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1 SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1 SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1 SUSE Linux Enterprise Server 11 SP3-LTSS:kvm-1.4.2-46.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:kvm-1.4.2-46.1 SUSE Linux Enterprise Server 11 SP4:kvm-1.4.2-44.1 SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1 SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1 SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1 SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1 SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1 SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1 SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1 SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:kvm-1.4.2-44.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H