Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-system-x86 | Jul 11, 2019 | Feb 16, 2017 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-ui-gtk | Jul 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub