CVE-2016-3077 Denial of service in n/a

Medium 6.5 Published 6 Jun 2017 Updated 5 Aug 2024

Remote authenticated users can crash the oVirt Engine process, causing denial of service for all virtual machines.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-3077?

CVE-2016-3077 is a medium-severity denial of service vulnerability in n/a, published on 6 Jun 2017. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.

Weakness: CWE-119

Which versions are affected by CVE-2016-3077?

It affects 1 product.

Linux distribution packages (20)

`rhevm` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-backend` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-dbscripts` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-extensions-api-impl` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-extensions-api-impl-javadoc` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-lib` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-restapi` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup-base` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup-plugin-ovirt-engine` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup-plugin-ovirt-engine-common` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup-plugin-vmconsole-proxy-helper` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-setup-plugin-websocket-proxy` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-tools` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-userportal` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-userportal-debuginfo` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-vmconsole-proxy-helper` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-webadmin-portal` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-webadmin-portal-debuginfo` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`
`rhevm-websocket-proxy` Red Hat:rhev_manager:3	All versions	`0:3.6.4.1-0.1.el6`

Products include Redhat Ovirt-Engine.

How do I fix CVE-2016-3077?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2016-3077 being exploited?

There is no known exploitation of CVE-2016-3077 in the wild and no public exploit code.

Sources

Also known as GHSA-3qjp-m28w-prvg, RHBA-2016:0583.