NVD

Id
21499  
Name
CVE-2016-6888  
Description
Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-12  
Seq
2016-6888  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
116043 21499 CVE-2016-6888 http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c  View
116044 21499 CVE-2016-6888 [oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation  View
116045 21499 CVE-2016-6888 [oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation  View
116046 21499 CVE-2016-6888 92556  View
116047 21499 CVE-2016-6888 [qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5369 JVNDB-2016-006142 QEMU の hw/net/net_tx_pkt.c の net_tx_pkt_init 関数における整数オーバーフローの脆弱性 QEMU (別名 Quick Emulator) の hw/net/net_tx_pkt.c の net_tx_pkt_init 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2016-6888 93395 CVE-2016-6888 21499 2.1 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006142.html 2016-08-18 2016-12-13 View