PT-2018-10134 · Qemu+5 · Qemu+5
Arash Tc
+1
·
Publicado
2018-10-16
·
Atualizado
2024-06-15
·
CVE-2018-10839
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Qemu emulator version 3.0.0 and earlier
Description
The issue is related to an integer overflow that could lead to a buffer overflow problem. This occurs when receiving packets over the network, specifically with the NE2000 NIC emulation support. A user inside the guest could exploit this flaw to crash the Qemu process, resulting in a denial of service (DoS).
Recommendations
For Qemu emulator version 3.0.0 and earlier, consider disabling the NE2000 NIC emulation support as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation.
Exploit
Correção
DoS
Stack Overflow
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu