Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemuUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-kvm-core | Jul 11, 2019 | Feb 16, 2017 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-sgabios | Jul 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub