Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 9, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade xen-tools-domuUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade xen-kmp-paeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-armUpgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-audio-ossUpgrade qemu-skiboot | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub