Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-7907

Опубликовано: 05 окт. 2016
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 2.1
CVSS3: 4.4

Описание

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

РелизСтатусПримечание
devel

not-affected

1:2.8+dfsg-3ubuntu2
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/xenial

released

1:2.5+dfsg-5ubuntu10.11
precise

DNE

trusty

not-affected

code not present
trusty/esm

not-affected

code not present
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

1:2.5+dfsg-5ubuntu10.11

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

code not present
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

EPSS

Процентиль: 30%
0.00112
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 3
redhat
больше 9 лет назад

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS3: 4.4
nvd
больше 9 лет назад

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

CVSS3: 4.4
debian
больше 9 лет назад

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emul ...

CVSS3: 4.4
github
больше 3 лет назад

The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.

suse-cvrf
около 9 лет назад

Security update for qemu

EPSS

Процентиль: 30%
0.00112
Низкий

2.1 Low

CVSS2

4.4 Medium

CVSS3