DEBIAN-CVE-2015-8701

QEMU aka Quick Emulator built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit tx descriptors in 'txconsume' routine, if a descriptor was to have more than allowed ROCKERTXFRAGSMAX=16 fragments. A privileged user inside guest coul...

PT-2016-3956

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is caused by an off-by-one error in the tx consume routine when processing transmit descriptors with more than the allowed number of fragments. This can be exploited by a privileged us...