Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-img | Jul 11, 2019 | Feb 16, 2017 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-audio-oss | Jul 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub