Security Bulletin: Multiple vulnerabilities in qemu-dlevel affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance (CVE-2016-4001, CVE-2016-4002, CVE-2016-4020)

Vulnerability Details

CVEID: CVE-2016-4001
DESCRIPTION: Qemu, built with the Luminary Micro Stellaris Ethernet Controller, is vulnerable to a buffer overflow, caused by improper bounds checking in the stellaris_enet_receive() when receiving network packets. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the Qemu process to crash.
CVSS Base Score: 5.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112134 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID: CVE-2016-4002
DESCRIPTION: Qemu, built with the MIPSnet controller emulator, is vulnerable to a buffer overflow, caused by improper bounds checking in the mipsnet_receive() when receiving network packets. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the Qemu process to crash.
CVSS Base Score: 5.6
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112135 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID: CVE-2016-4020
DESCRIPTION: Qemu, built with the Task Priority Register(TPR) optimizations for 32-bit Windows guests, is vulnerable to a denial of service, caused by a information leakage error. By accessing Task Priority Register(TPR), a remote attacker could exploit this vulnerability to leak host memory bytes.
CVSS Base Score: 5.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112267 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)