NVD

Id
19727  
Name
CVE-2016-4001  
Description
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-05-23  
Modified Date
2016-11-28  
Seq
2016-4001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
108062 19727 CVE-2016-4001 http://git.qemu.org/?p=qemu.git;a=commit;h=3a15cc0e1ee7168db0782133d2607a6bfa422d66  View
108063 19727 CVE-2016-4001 FEDORA-2016-35d7b09908  View
108064 19727 CVE-2016-4001 FEDORA-2016-75063477ca  View
108065 19727 CVE-2016-4001 FEDORA-2016-48e72b7bc5  View
108066 19727 CVE-2016-4001 [oss-security] 20160411 CVE request: Qemu: net: buffer overflow in stellaris_enet emulator  View
108067 19727 CVE-2016-4001 [oss-security] 20160412 Re: CVE request: Qemu: net: buffer overflow in stellaris_enet emulator  View
108068 19727 CVE-2016-4001 85976  View
108069 19727 CVE-2016-4001 USN-2974-1  View
108070 19727 CVE-2016-4001 [qemu-devel] 20160408 [PATCH v3] net: stellaris_enet: check packet length against receive buffer  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2130 JVNDB-2016-002903 QEMU の hw/net/stellaris_enet.c の stellaris_enet_receive 関数におけるバッファオーバーフローの脆弱性 QEMU の hw/net/stellaris_enet.c の stellaris_enet_receive 関数には、Stellaris イーサネットコントローラが、過度に大きなパケットを受信するよう設定されている場合、バッファオーバーフローの脆弱性が存在します。 CVE-2016-4001 90507 CVE-2016-4001 19727 4.3 5.9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002903.html 2016-04-11 2016-05-27 View