Описание
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qemu | fixed | 1:2.4+dfsg-4 | package | |
| qemu | no-dsa | jessie | package | |
| qemu | no-dsa | wheezy | package | |
| qemu | end-of-life | squeeze | package | |
| qemu-kvm | removed | package | ||
| qemu-kvm | no-dsa | wheezy | package | |
| qemu-kvm | end-of-life | squeeze | package |
Примечания
https://www.openwall.com/lists/oss-security/2015/09/18/5
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg04729.html
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg04730.html
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg04731.html
EPSS
Связанные уязвимости
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании
EPSS