{"id":"CVE-2016-7422","aliases":["DEBIAN-CVE-2016-7422","EUVD-2016-8275","GHSA-fp4p-m87h-5fx8","RHSA-2017:2392","RHSA-2017:2408","SUSE-SU-2016:2879-1","openSUSE-SU-2024:11287-1"],"status":"published","title":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00364,"percentile":0.30508,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2016-11-22T14:26:40Z","modified":"2026-10-24T10:30:34Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:2.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:2.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:2.7+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-14.el7"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:11::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:7::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:8::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"Red Hat:openstack:9::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.9.0-10.el7"}]}],"bundled":23},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-31.2"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-31.2"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-31.2"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-31.2"}]}],"bundled":21},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-32.1"}]}],"bundled":135}],"products":[{"vendor":"opensuse","product":"leap"},{"vendor":"qemu","product":"qemu"},{"vendor":"redhat","product":"openstack"},{"vendor":"redhat","product":"virtualization"}],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=973e7170dddefb491a48df5cba33b2ae151013a0","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03546.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2392","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201609-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/92996","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/10","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/16/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2408","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7422","tags":["advisory"]},{"url":"http://git.qemu.org/?p=qemu.git;a=commit;h=973e7170dddefb491a48df5cba33b2ae151013a0"},{"url":"https://access.redhat.com/security/cve/CVE-2016-7422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376755","tags":["report"]},{"url":"https://github.com/advisories/GHSA-fp4p-m87h-5fx8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7422","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=971799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1055093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1086193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1159728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1179045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1189998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1193826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1248279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1256618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1262676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1264258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1271060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1281407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1285928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1291284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1293975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1295637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1314131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1333425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1340439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1342434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1347172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1352769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1354177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1360301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1363938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1365708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1366919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1367731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1368422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1376760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1377837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379206","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1380258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1381630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1384909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1387600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1389238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1391942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1394140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1396536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400059","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1400962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1402645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1405123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1409973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1414694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1420679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1421626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1421788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1422846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1425765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1427466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1428810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1432588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1433193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1433921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1434784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1435521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1436616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1438566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1441069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1444326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1445174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447590","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1447874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1448813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1449939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1450759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1451862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1452752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1453169","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454641","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1455150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1456456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1457740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1458782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461827","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2392.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4020","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4020","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4020","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6835","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6835","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-6888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6888","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8576","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8576","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8576","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8669","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8669","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8669","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8909","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8909","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8910","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8910","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9907","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9907","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9911","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9911","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9921","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9922","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9922","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10155","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2630","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2630","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2630","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5579","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5579","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5898","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5898","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9310","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9310","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9310","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9373","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9374","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9375","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9375","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1427833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1446547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1459668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1460170","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2408.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-6414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-6414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6414","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-9524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-9524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-9524","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162879-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1000345","tags":["report"]},{"url":"https://bugzilla.suse.com/1000346","tags":["report"]},{"url":"https://bugzilla.suse.com/1001151","tags":["report"]},{"url":"https://bugzilla.suse.com/1002116","tags":["report"]},{"url":"https://bugzilla.suse.com/1002549","tags":["report"]},{"url":"https://bugzilla.suse.com/1002550","tags":["report"]},{"url":"https://bugzilla.suse.com/1002557","tags":["report"]},{"url":"https://bugzilla.suse.com/1003612","tags":["report"]},{"url":"https://bugzilla.suse.com/1003613","tags":["report"]},{"url":"https://bugzilla.suse.com/1003878","tags":["report"]},{"url":"https://bugzilla.suse.com/1003893","tags":["report"]},{"url":"https://bugzilla.suse.com/1003894","tags":["report"]},{"url":"https://bugzilla.suse.com/1004702","tags":["report"]},{"url":"https://bugzilla.suse.com/1004706","tags":["report"]},{"url":"https://bugzilla.suse.com/1004707","tags":["report"]},{"url":"https://bugzilla.suse.com/1005353","tags":["report"]},{"url":"https://bugzilla.suse.com/1005374","tags":["report"]},{"url":"https://bugzilla.suse.com/1006536","tags":["report"]},{"url":"https://bugzilla.suse.com/1006538","tags":["report"]},{"url":"https://bugzilla.suse.com/1007263","tags":["report"]},{"url":"https://bugzilla.suse.com/1007391","tags":["report"]},{"url":"https://bugzilla.suse.com/1007493","tags":["report"]},{"url":"https://bugzilla.suse.com/1007494","tags":["report"]},{"url":"https://bugzilla.suse.com/1007495","tags":["report"]},{"url":"https://bugzilla.suse.com/1007769","tags":["report"]},{"url":"https://bugzilla.suse.com/1008148","tags":["report"]},{"url":"https://bugzilla.suse.com/998516","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9106","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11334","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5856","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-03812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8934","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3682","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-7422","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2016-12-10T00:00:00Z","modified":"2024-08-06T01:57:47.613Z","updated_at":"2026-11-02T14:33:36.175943Z"}],"euvd":[{"id":"EUVD-2016-8275","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2016-12-10T00:00:00Z","modified":"2024-08-06T01:57:47Z","updated_at":"2026-11-03T02:22:32.939633Z"}],"ghsa":[{"id":"GHSA-fp4p-m87h-5fx8","title":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2022-05-13T01:07:29Z","modified":"2023-02-02T21:33:51Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:52:47.451891Z"}],"nvd":[{"id":"CVE-2016-7422","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2016-12-10T00:59:18.687Z","modified":"2026-06-17T00:53:02.287Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:03:32.79141Z"}],"osv":[{"id":"CVE-2016-7422","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2016-12-10T00:59:18.687Z","modified":"2026-10-24T10:30:34.520925805Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"DEBIAN-CVE-2016-7422","description":"The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.","status":"published","published":"2016-12-10T00:59:18.687Z","modified":"2026-09-22T07:00:30.097241473Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"RHSA-2017:2392","title":"Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:48:09Z","modified":"2026-07-01T10:02:42Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:2408","title":"Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update","status":"published","published":"2024-09-13T16:49:03Z","modified":"2026-06-29T10:17:11Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"openSUSE-SU-2024:11287-1","title":"qemu-6.1.0-32.1 on GA media","description":"These are all security issues fixed in the qemu-6.1.0-32.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:57.481645Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2016:2879-1","title":"Security update for qemu","description":"This update for qemu to version 2.6.2 fixes the several issues.\n\nThese security issues were fixed:\n- CVE-2016-7161: Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allowed attackers to execute arbitrary code on the QEMU host via a large ethlite packet (bsc#1001151).\n- CVE-2016-7170: OOB stack memory access when processing svga command (bsc#998516).\n- CVE-2016-7466: xhci memory leakage during device unplug (bsc#1000345).\n- CVE-2016-7422: NULL pointer dereference in virtqueu_map_desc (bsc#1000346).\n- CVE-2016-7908: The mcf_fec_do_tx function in hw/net/mcf_fec.c did not properly limit the buffer descriptor count when transmitting packets, which allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags (bsc#1002550).\n- CVE-2016-7995: Memory leak in ehci_process_itd (bsc#1003612).\n- CVE-2016-8576: The xhci_ring_fetch function in hw/usb/hcd-xhci.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process (bsc#1003878).\n- CVE-2016-8578: The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation (bsc#1003894).\n- CVE-2016-9105: Memory leakage in v9fs_link (bsc#1007494).\n- CVE-2016-8577: Memory leak in the v9fs_read function in hw/9pfs/9p.c allowed local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation (bsc#1003893).\n- CVE-2016-9106: Memory leakage in v9fs_write (bsc#1007495).\n- CVE-2016-8669: The serial_update_parameters function in hw/char/serial.c allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base (bsc#1004707).\n- CVE-2016-7909: The pcnet_rdra_addr function in hw/net/pcnet.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0 (bsc#1002557).\n- CVE-2016-9101: eepro100 memory leakage whern unplugging a device (bsc#1007391).\n- CVE-2016-8668: The rocker_io_writel function in hw/net/rocker/rocker.c allowed local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size (bsc#1004706).\n- CVE-2016-8910: The rtl8139_cplus_transmit function in hw/net/rtl8139.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count (bsc#1006538).\n- CVE-2016-8909: The intel_hda_xfer function in hw/audio/intel-hda.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position (bsc#1006536).\n- CVE-2016-7994: Memory leak in virtio_gpu_resource_create_2d (bsc#1003613).\n- CVE-2016-9104: Integer overflow leading to OOB access in 9pfs (bsc#1007493).\n- CVE-2016-8667: The rc4030_write function in hw/dma/rc4030.c allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value (bsc#1004702).\n- CVE-2016-7907: The pcnet_rdra_addr function in hw/net/pcnet.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0 (bsc#1002549).\n\nThese non-security issues were fixed:\n- Change kvm-supported.txt to be per-architecture documentation, stored in the\n  package documentation directory of each per-arch package (bsc#1005353).\n- Update support doc to include current ARM64 (AArch64) support stance (bsc#1005374).\n- Fix migration failure when snapshot also has been done (bsc#1008148).\n- Change package post script udevadm trigger calls to be device specific (bsc#1002116).\n- Add qmp-commands.txt documentation file back in. It was inadvertently dropped.\n- Add an x86 cpu option (l3-cache) to specify that an L3 cache is present and\n  another option (cpuid-0xb) to enable the cpuid 0xb leaf (bsc#1007769).\n\nFor Leap 42.2 this update also enabled the smartcard support (bsc#1007263).\n","status":"published","published":"2016-11-22T14:26:40Z","modified":"2026-02-04T04:14:51.939445Z","updated_at":"2026-11-02T15:53:43.438985Z"}]}}