PT-2015-2670 · Qemu+3 · Qemu+3

Prasad J Pandit

·

Publicado

2015-10-13

·

Atualizado

2020-09-09

·

CVE-2015-7295

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to the Virtual Network Device (virtio-net) support in QEMU, specifically in the hw/virtio/virtio.c module. When big or mergeable receive buffers are not supported, remote attackers can cause a denial of service by flooding the network with jumbo frames on the tuntap or macvtap interface. This can lead to guest network consumption. The problem is caused by a buffer overflow in the virtio.c module.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2158
BDU:2015-12035
CVE-2015-7295
DSA-3469-1
DSA-3470-1
DSA-3471-1
MGASA-2015-0397
SUSE-SU-2016:1560-1
SUSE-SU-2016:1698-1
SUSE-SU-2016:1785-1
USN-2828-1

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu