QEMU USB Net NDIS Integer Overflow Vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in QEMU due to 'rndisqueryresponse', 'rndissetresponse' and 'rndissetresponse' in the /hw/usb/dev-network.c file. ' and...

UBUNTU-CVE-2016-2538

Multiple integer overflows in the USB Net device emulator hw/usb/dev-network.c in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service QEMU process crash or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the 1...