CVE-2016-7161

Critical

Published: 05/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-7161 involves a heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU, allowing attackers to execute arbitrary code on the QEMU host via a large ethlite packet.

Risk Assessment

An attacker could gain full control over the QEMU system, posing a serious security threat to the organization.

Recommendation

It is recommended to update QEMU to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.

Original NVD description (English source)

Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.