NVD

Id
18294  
Name
CVE-2016-1981  
Description
QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-29  
Modified Date
2016-12-30  
Seq
2016-1981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101374 18294 CVE-2016-1981 [oss-security] 20160119 CVE request Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines  View
101375 18294 CVE-2016-1981 [oss-security] 20160122 Re: CVE request Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines  View
101376 18294 CVE-2016-1981 81549  View
101377 18294 CVE-2016-1981 https://bugzilla.redhat.com/show_bug.cgi?id=1298570  View
101378 18294 CVE-2016-1981 [qemu-devel] 20160119 [PATCH] e1000: eliminate infinite loops on out-of-bounds transfer start  View

Related JVN