CVE-2014-3640

CVE-2014-3640 affects QEMU, where the sosendto function in slirp/udp.c before 2.1.2 is vulnerable. A local user can trigger a NULL pointer dereference by sending a UDP packet with source port/address 0, causing a denial of service via uninitialized socket access. Affected product: QEMU (slirp UDP...