Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-langUpgrade qemu-audio-paUpgrade xen-tools-domuUpgrade xen-kmp-paeUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade xenUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade xen-toolsUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade xen-libsUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390xUpgrade qemu-armUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-sgabiosUpgrade qemu-block-ssh | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub