Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-7908

Опубликовано: 05 окт. 2016
Источник: nvd
CVSS3: 4.4
CVSS2: 2.1
EPSS Низкий

Описание

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 2.7.1 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 34%
0.00135
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 4.4
ubuntu
почти 9 лет назад

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS3: 3
redhat
почти 9 лет назад

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS3: 4.4
debian
почти 9 лет назад

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emul ...

CVSS3: 4.4
github
больше 3 лет назад

The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

suse-cvrf
больше 8 лет назад

Security update for xen

EPSS

Процентиль: 34%
0.00135
Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-835