Denial Of Service (DoS)

2020-04-1000:42:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.222 Low

EPSS

Percentile

96.5%

JSON

kvm is vulnerable to denial of service. A flaw was found in the way QEMU-KVM handled erroneous data provided by the Linux virtio-net driver, used by guest operating systems. Due to a deficiency in the TSO (TCP segment offloading) implementation, a guest’s virtio-net driver would transmit improper data to a certain QEMU-KVM process on the host, causing the guest to crash. A remote attacker could use this flaw to send specially-crafted data to a target guest system, causing that guest to crash.

CPENameOperatorVersion
kvmeq83__105.el5_4.9
kvmeq83__105.el5_4.1
kvmeq83__105.el5_4.13
kvmeq83__105.el5_4.7
kvmeq83__105.el5_4.28
kvmeq83__105.el5
kvmeq83__105.el5_4.27
kvmeq83__105.el5_4.22
kvmeq83__105.el5_4.9
kvmeq83__105.el5_4.1

Name	Operator	Version
kvm	eq	83__105.el5_4.9
kvm	eq	83__105.el5_4.1
kvm	eq	83__105.el5_4.13
kvm	eq	83__105.el5_4.7
kvm	eq	83__105.el5_4.28
kvm	eq	83__105.el5
kvm	eq	83__105.el5_4.27
kvm	eq	83__105.el5_4.22
kvm	eq	83__105.el5_4.9
kvm	eq	83__105.el5_4.1