ISOMAN

CVE

CVE-2016-4002

Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html
  2. http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html
  3. http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html
  4. http://www.openwall.com/lists/oss-security/2016/04/11/6
  5. http://www.openwall.com/lists/oss-security/2016/04/12/7
  6. http://www.securityfocus.com/bid/85992
  7. http://www.ubuntu.com/usn/USN-2974-1
  8. https://bugzilla.redhat.com/show_bug.cgi?id=1326082
  9. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  10. https://lists.gnu.org/archive/html/qemu-devel/2016-04/msg01131.html
  11. https://security.gentoo.org/glsa/201609-01
  12. http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183275.html
  13. http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183350.html
  14. http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184209.html
  15. http://www.openwall.com/lists/oss-security/2016/04/11/6
  16. http://www.openwall.com/lists/oss-security/2016/04/12/7
  17. http://www.securityfocus.com/bid/85992
  18. http://www.ubuntu.com/usn/USN-2974-1
  19. https://bugzilla.redhat.com/show_bug.cgi?id=1326082
  20. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html