Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 16, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jun 16, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Jun 16, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 5, 2016 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-x86Upgrade xen-doc-htmlUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-block-rbdUpgrade xen-tools-domuUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-kvmUpgrade xen-doc-pdfUpgrade qemu-toolsUpgrade xen-libsUpgrade kvmUpgrade xen-develUpgrade qemu-guest-agentUpgrade xen-libs-32bitUpgrade xen-tools | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-arm | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub