CVE-2018-10839

Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.

Score
CVSS 3.0 6.5 Medium
Status
Modified - secalert@redhat.com
Published
2018-10-16
Last modified
2024-08-05
Weaknesses
CWE-121, CWE-190

Affected products

References

 
 
© AVABIS GmbH privacypolicy about