CVE

Id
86021  
CVE No.
CVE-2015-8744  
Status
Candidate  
Description
QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.  
Phase
Assigned (20160104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756602 86021 CVE-2015-8744 MLIST:[oss-security] 20160104 CVE request Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash  View
756603 86021 CVE-2015-8744 URL:http://www.openwall.com/lists/oss-security/2016/01/04/3  View
756604 86021 CVE-2015-8744 MLIST:[oss-security] 20160104 Re: CVE request Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash  View
756605 86021 CVE-2015-8744 URL:http://www.openwall.com/lists/oss-security/2016/01/04/6  View
756606 86021 CVE-2015-8744 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commitdiff;h=a7278b36fcab9af469563bd7b  View
756607 86021 CVE-2015-8744 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1270871  View
756608 86021 CVE-2015-8744 BID:79821  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11562 JVNDB-2015-006882 Apache Solr の Admin UI の webapp/web/js/scripts/schema-browser.js におけるクロスサイトスクリプティングの脆弱性 Apache Solr の Admin UI の webapp/web/js/scripts/schema-browser.js には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-8796 86021 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006882.html  View