Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-aarch64-coreUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-kvm | Jul 11, 2019 | Feb 16, 2017 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-hw-display-qxl | Jul 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub