ISOMAN

CVE

CVE-2016-2841

The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.

Severity
MEDIUM
CVSS
6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=415ab35a441eca767d033a2702223e785b9d5190
  2. http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html
  3. http://www.openwall.com/lists/oss-security/2016/03/02/8
  4. http://www.securityfocus.com/bid/84028
  5. http://www.ubuntu.com/usn/USN-2974-1
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1303106
  7. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  8. https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg06126.html
  9. https://security.gentoo.org/glsa/201609-01
  10. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=415ab35a441eca767d033a2702223e785b9d5190
  11. http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html
  12. http://www.openwall.com/lists/oss-security/2016/03/02/8
  13. http://www.securityfocus.com/bid/84028
  14. http://www.ubuntu.com/usn/USN-2974-1
  15. https://bugzilla.redhat.com/show_bug.cgi?id=1303106
  16. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  17. https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg06126.html
  18. https://security.gentoo.org/glsa/201609-01