3 matches found
CVE-2016-2841: Improper Input Validation
The ne2000receive function in the NE2000 NIC emulation support hw/net/ne2000.c in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash via crafted values for the PSTART and PSTOP registers, involving ring buffer control...
CVE-2015-5279: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via vectors related to receiving packets...
PT-2015-6829
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.4.0.1 Arista affected versions not specified Description The issue allows attackers to cause a denial of service or possibly execute arbitrary code via vectors related to receiving packets. This is related to the ne200...