The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2016 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemuUpgrade qemu-toolsUpgrade qemu-langUpgrade xen-libsUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade xenUpgrade xen-doc-htmlUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade xen-kmp-pae | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-sparc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub