CVE

Id
67559  
CVE No.
CVE-2014-0150  
Status
Candidate  
Description
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
651580 67559 CVE-2014-0150 MLIST:[Qemu-devel] 20140411 Re: [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun  View
651581 67559 CVE-2014-0150 URL:http://article.gmane.org/gmane.comp.emulators.qemu/266768  View
651582 67559 CVE-2014-0150 MLIST:[Qemu-devel] 20140411 [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun  View
651583 67559 CVE-2014-0150 URL:http://thread.gmane.org/gmane.comp.emulators.qemu/266713  View
651584 67559 CVE-2014-0150 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1078846  View
651585 67559 CVE-2014-0150 UBUNTU:USN-2182-1  View
651586 67559 CVE-2014-0150 URL:http://www.ubuntu.com/usn/USN-2182-1  View
651587 67559 CVE-2014-0150 SECUNIA:57878  View
651588 67559 CVE-2014-0150 URL:http://secunia.com/advisories/57878  View
651589 67559 CVE-2014-0150 SECUNIA:58191  View

Related JVN