Описание
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qemu | fixed | 1:9.0.2+ds-3 | package | |
| qemu | fixed | 1:7.2+dfsg-7+deb12u8 | bookworm | package |
| qemu | postponed | bullseye | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2295760
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/f1595ceb9aad36a6c1da95bcb77ab9509b38822d (v9.1.0-rc1)
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/44ef533498db5078c4432a3f1e160ed5539d7d29 (v8.2.7)
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/d2476ced2e34b661dded77d8774955b5a90fbda4 (v7.2.14)
Introduced by: https://gitlab.com/qemu-project/qemu/-/commit/4474e37a5b3a616803f4570b542e8eede91e50d2 (v5.1.0-rc0)
EPSS
Связанные уязвимости
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.
EPSS