vulnerability

Ubuntu: USN-7744-1 (CVE-2024-3567): QEMU vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:L/AC:L/Au:S/C:N/I:N/A:C)	Apr 10, 2024	Nov 19, 2024	Sep 16, 2025

Severity

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

Apr 10, 2024

Added

Nov 19, 2024

Modified

Sep 16, 2025

Description

A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.

Solutions

ubuntu-upgrade-qemu-systemubuntu-upgrade-qemu-system-armubuntu-upgrade-qemu-system-mipsubuntu-upgrade-qemu-system-miscubuntu-upgrade-qemu-system-ppcubuntu-upgrade-qemu-system-s390xubuntu-upgrade-qemu-system-sparcubuntu-upgrade-qemu-system-x86ubuntu-upgrade-qemu-system-x86-xenubuntu-upgrade-qemu-system-xen

References

CVE-2024-3567
https://attackerkb.com/topics/CVE-2024-3567
CWE-617
UBUNTU-USN-7744-1
URL-https://access.redhat.com/security/cve/CVE-2024-3567
URL-https://ubuntu.com/security/notices/USN-7744-1
URL-https://www.cve.org/CVERecord?id=CVE-2024-3567

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today