CVE

Id
102878  
CVE No.
CVE-2017-6058  
Status
Candidate  
Description
Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.  
Phase
Assigned (20170217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805941 102878 CVE-2017-6058 MLIST:[oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping  View
805942 102878 CVE-2017-6058 URL:http://www.openwall.com/lists/oss-security/2017/02/17/2  View
805943 102878 CVE-2017-6058 MLIST:[qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping  View
805944 102878 CVE-2017-6058 URL:https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html  View
805945 102878 CVE-2017-6058 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6  View
805946 102878 CVE-2017-6058 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1423358  View
805947 102878 CVE-2017-6058 BID:96277  View
805948 102878 CVE-2017-6058 URL:http://www.securityfocus.com/bid/96277  View
805949 102878 CVE-2017-6058 SECTRACK:1037856  View

Related JVN