Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-htmlUpgrade qemu-ui-openglUpgrade qemu-sgabiosUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemu-armUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade xen-tools-domUUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade xenUpgrade xen-kmp-paeUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-langUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-seabiosUpgrade qemu-block-iscsi | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-x86 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub