The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2016 |
| Suse | — | Upgrade qemu-block-rbdUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-block-curlUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade xenUpgrade xen-kmp-defaultUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-langUpgrade xen-develUpgrade xen-libsUpgrade qemu-ppcUpgrade qemu | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub