Qemu: net: out of bounds read in net_checksum_calculate()

An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet's checksum, because a QEMU function used the packet's payload length without checking against the data buffer's size. A user inside a guest could...

QEMU Denial of Service Vulnerability (CNVD-2016-02207)

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard. A security vulnerability in the netchecksumcalculate function in QEMU's net/checksum.c file can be exploited by an attacker to cause a denial of service out-of-bounds heap read and crash with the help of...

DEBIAN-CVE-2016-2857

The netchecksumcalculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service out-of-bounds heap read and crash via the payload length in a crafted packet...

UBUNTU-CVE-2016-2857

The netchecksumcalculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service out-of-bounds heap read and crash via the payload length in a crafted packet...

PT-2016-5244 · Qemu +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue allows local guest OS users to cause a denial of service, resulting in an out-of-bounds heap read and crash. This is achieved via the payload length in a crafted packet. The net...