CVE-2016-6888

2016-12-1000:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

26.1%

JSON

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.

OSVersionArchitecturePackageVersionFilename
Debian12allqemu< 1:2.6+dfsg-3.1qemu_1:2.6+dfsg-3.1_all.deb
Debian11allqemu< 1:2.6+dfsg-3.1qemu_1:2.6+dfsg-3.1_all.deb
Debian10allqemu< 1:2.6+dfsg-3.1qemu_1:2.6+dfsg-3.1_all.deb
Debian999allqemu< 1:2.6+dfsg-3.1qemu_1:2.6+dfsg-3.1_all.deb
Debian13allqemu< 1:2.6+dfsg-3.1qemu_1:2.6+dfsg-3.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	qemu	< 1:2.6+dfsg-3.1	qemu_1:2.6+dfsg-3.1_all.deb
Debian	11	all	qemu	< 1:2.6+dfsg-3.1	qemu_1:2.6+dfsg-3.1_all.deb
Debian	10	all	qemu	< 1:2.6+dfsg-3.1	qemu_1:2.6+dfsg-3.1_all.deb
Debian	999	all	qemu	< 1:2.6+dfsg-3.1	qemu_1:2.6+dfsg-3.1_all.deb
Debian	13	all	qemu	< 1:2.6+dfsg-3.1	qemu_1:2.6+dfsg-3.1_all.deb

0.001 Low

EPSS

Percentile

26.1%

JSON

Related for DEBIANCVE:CVE-2016-6888