Описание
The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.
It was found that the Windows Virtio NIC driver did not sufficiently sanitize the length of the incoming IP packets, as demonstrated by a packet with IP options present but the overall packet length not being adjusted to reflect the length of those options. A remote attacker able to send a specially crafted IP packet to the guest could use this flaw to crash that guest.
Отчет
This issue does affect the virtio-win packages as shipped with Red Hat Enteprise Linux 6 and 7. Future updates for the respective releases will address this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | virtio-win | Will not fix | ||
| Supplementary for Red Hat Enterprise Linux 6 | virtio-win | Fixed | RHSA-2015:1043 | 03.06.2015 |
| Supplementary for Red Hat Enterprise Linux 7 | virtio-win | Fixed | RHSA-2015:1044 | 03.06.2015 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS2
Связанные уязвимости
The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.
The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.
EPSS
6.1 Medium
CVSS2