Lucene search

K
freebsdFreeBSD42CBD1E8-B152-11E5-9728-002590263BF5
HistorySep 18, 2015 - 12:00 a.m.

qemu -- denial of service vulnerability in virtio-net support

2015-09-1800:00:00
vuxml.freebsd.org
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.076 Low

EPSS

Percentile

94.1%

Prasad J Pandit, Red Hat Product Security Team, reports:

Qemu emulator built with the Virtual Network Device(virtio-net)
support is vulnerable to a DoS issue. It could occur while receiving
large packets over the tuntap/macvtap interfaces and when guest’s
virtio-net driver did not support big/mergeable receive buffers.
An attacker on the local network could use this flaw to disable
guest’s networking by sending a large number of jumbo frames to the
guest, exhausting all receive buffers and thus leading to a DoS
situation.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqemu< 2.4.1UNKNOWN
FreeBSDanynoarchqemu-devel< 2.4.1UNKNOWN
FreeBSDanynoarchqemu-sbruno< 2.5.50.g20151224UNKNOWN
FreeBSDanynoarchqemu-user-static< 2.5.50.g20151224UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.076 Low

EPSS

Percentile

94.1%