CVE Kennung:	CVE-2016-1714
Beschreibung:	The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.703470   1.3.6.1.4.1.25623.1.0.871552   1.3.6.1.4.1.25623.1.0.122865   1.3.6.1.4.1.25623.1.0.703469   1.3.6.1.4.1.25623.1.0.882389   1.3.6.1.4.1.25623.1.0.703471   1.3.6.1.4.1.25623.1.0.882388   1.3.6.1.4.1.25623.1.0.871553
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1714 BugTraq ID: 80250 http://www.securityfocus.com/bid/80250 Debian Security Information: DSA-3469 (Google Search) http://www.debian.org/security/2016/dsa-3469 Debian Security Information: DSA-3470 (Google Search) http://www.debian.org/security/2016/dsa-3470 Debian Security Information: DSA-3471 (Google Search) http://www.debian.org/security/2016/dsa-3471 https://security.gentoo.org/glsa/201604-01 https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00428.html http://www.openwall.com/lists/oss-security/2016/01/11/7 http://www.openwall.com/lists/oss-security/2016/01/12/10 http://www.openwall.com/lists/oss-security/2016/01/12/11 RedHat Security Advisories: RHSA-2016:0081 http://rhn.redhat.com/errata/RHSA-2016-0081.html RedHat Security Advisories: RHSA-2016:0082 http://rhn.redhat.com/errata/RHSA-2016-0082.html RedHat Security Advisories: RHSA-2016:0083 http://rhn.redhat.com/errata/RHSA-2016-0083.html RedHat Security Advisories: RHSA-2016:0084 http://rhn.redhat.com/errata/RHSA-2016-0084.html RedHat Security Advisories: RHSA-2016:0085 http://rhn.redhat.com/errata/RHSA-2016-0085.html RedHat Security Advisories: RHSA-2016:0086 http://rhn.redhat.com/errata/RHSA-2016-0086.html RedHat Security Advisories: RHSA-2016:0087 http://rhn.redhat.com/errata/RHSA-2016-0087.html RedHat Security Advisories: RHSA-2016:0088 http://rhn.redhat.com/errata/RHSA-2016-0088.html http://www.securitytracker.com/id/1034858