Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-block-gluster | Jul 11, 2019 | Feb 16, 2017 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-audio-oss | Jul 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub