Lucene search

K
redhatcveRedhat.comRH:CVE-2016-5403
HistoryJul 27, 2016 - 3:18 p.m.

CVE-2016-5403

2016-07-2715:18:30
redhat.com
access.redhat.com
17

EPSS

0.001

Percentile

28.2%

Quick Emulator (QEMU) built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement results in unbounded memory allocation on the host controlled by the guest.