CVE-2016-7422

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue allows local guest OS administrators to cause a denial of service, resulting in a NULL pointer dereference and QEMU process crash. This is achieved by providing a large I/O descriptor buffer length value to the virtqueue map desc function in hw/virtio/virtio.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.