CVE

Id
93708  
CVE No.
CVE-2016-6888  
Status
Candidate  
Description
Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.  
Phase
Assigned (20160819)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794379 93708 CVE-2016-6888 MLIST:[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation  View
794380 93708 CVE-2016-6888 URL:http://www.openwall.com/lists/oss-security/2016/08/19/6  View
794381 93708 CVE-2016-6888 MLIST:[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation  View
794382 93708 CVE-2016-6888 URL:http://www.openwall.com/lists/oss-security/2016/08/19/10  View
794383 93708 CVE-2016-6888 MLIST:[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation  View
794384 93708 CVE-2016-6888 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html  View
794385 93708 CVE-2016-6888 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c  View
794386 93708 CVE-2016-6888 BID:92556  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5013 JVNDB-2016-005786 Microsoft Edge の Chakra JavaScript スクリプトエンジンにおける任意のコードを実行される脆弱性 Microsoft Edge の Chakra JavaScript スクリプトエンジンには、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-7201 93708 7.6 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005786.html  View