CVE

Id
93655  
CVE No.
CVE-2016-6835  
Status
Candidate  
Description
The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.  
Phase
Assigned (20160817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794242 93655 CVE-2016-6835 MLIST:[oss-security] 20160812 CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation  View
794243 93655 CVE-2016-6835 URL:http://www.openwall.com/lists/oss-security/2016/08/11/7  View
794244 93655 CVE-2016-6835 MLIST:[oss-security] 20160817 Re: CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation  View
794245 93655 CVE-2016-6835 URL:http://www.openwall.com/lists/oss-security/2016/08/18/4  View
794246 93655 CVE-2016-6835 MLIST:[qemu-devel] 20160810 Re: [PATCH] net: vmxnet: check IP header length  View
794247 93655 CVE-2016-6835 URL:https://lists.gnu.org/archive/html/qemu-stable/2016-08/msg00077.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5096 JVNDB-2016-005869 MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 MoinMoin は、"JavaScript インジェクション" 攻撃を実行される脆弱性が存在します。 CVE-2016-7148 93655 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005869.html  View