Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-1714

28
FAUCET Score

CVE-2016-1714 is a denial-of-service vulnerability in QEMU's Firmware Configuration device emulation, affecting products like Oracle Linux and Red Hat OpenStack. It allows guest OS users with CAP_SYS_RAWIO privilege to trigger out-of-bounds read/write access, leading to a crash or potential arbitrary code execution. Rated 8.1 HIGH, exploitation requires high attack complexity but no user interaction. There is no evidence of active exploitation, public exploit code, or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
5.0CPE matchmatch criteria
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
6CPE matchmatch criteria
cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*
7CPE matchmatch criteria
cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
<= 2.3.0CPE matchmatch criteria
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

8.1HIGH

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.4
Impact Score
6.0
CvssVersion
3.0

Exploit Intelligence

EPSS Score
6.08%
Probability of exploitation in next 30 days
EPSS Percentile
92.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0609 is in the 99th percentile among its peer group of 157 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (12)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: qemu-kvm-2:0.12.1.2-2.479.el6_7.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: qemu-kvm-10:1.5.3-105.el7_2.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6Fixed in: qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7Fixed in: qemu-kvm-rhev-10:2.3.0-31.el7_2.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7Fixed in: qemu-kvm-rhev-10:2.3.0-31.el7_2.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7Fixed in: qemu-kvm-rhev-10:2.3.0-31.el7_2.7
View patch
redhatpatch availablevia redhat_api
Product: RHEV 3.6 For IBM Power SystemsFixed in: qemu-kvm-rhev-10:2.3.0-31.el7_2.7
View patch
redhatpatch availablevia redhat_api
Product: RHEV 3.X Hypervisor and Agents for RHEL-6Fixed in: qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.4
View patch
redhatpatch availablevia redhat_api
Product: RHEV 3.X Hypervisor and Agents for RHEL-7Fixed in: qemu-kvm-rhev-10:2.3.0-31.el7_2.7
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: qemu-kvm-rhev
redhatno patchvia redhat_api
Product: Red Hat OpenStack Platform 8 (Liberty)Fixed in: qemu-kvm-rhev
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kvm

Vendor Advisories (1)

redhatCVE-2016-1714Important

Qemu: nvram: OOB r/w access in processing firmware configurations

Jan 5, 2016

References

rhn.redhat.com / errata/RHSA-2016-0081.html
rhn.redhat.com / errata/RHSA-2016-0082.html
rhn.redhat.com / errata/RHSA-2016-0083.html
rhn.redhat.com / errata/RHSA-2016-0084.html
rhn.redhat.com / errata/RHSA-2016-0085.html
Issue TrackingThird Party AdvisoryVDB Entry
rhn.redhat.com / errata/RHSA-2016-0086.html
rhn.redhat.com / errata/RHSA-2016-0087.html
rhn.redhat.com / errata/RHSA-2016-0088.html
Issue TrackingThird Party AdvisoryVDB Entry
lists.gnu.org / archive/html/qemu-devel/2016-01/msg00428.html
Vendor Advisory
security.gentoo.org / glsa/201604-01
debian.org / security/2016/dsa-3469
debian.org / security/2016/dsa-3470
debian.org / security/2016/dsa-3471
openwall.com / lists/oss-security/2016/01/11/7
Third Party Advisory
openwall.com / lists/oss-security/2016/01/12/10
Third Party Advisory
openwall.com / lists/oss-security/2016/01/12/11
Third Party Advisory
oracle.com / technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
securityfocus.com / bid/80250
Third Party Advisory
securitytracker.com / id/1034858
Third Party Advisory