2.1

CVE-2014-3640

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 7.0
Qemu ≫ Qemu Version 2.0.0 Update -
Qemu ≫ Qemu Version 2.0.0 Update rc0
Qemu ≫ Qemu Version 2.0.0 Update rc1
Qemu ≫ Qemu Version 2.0.0 Update rc2
Qemu ≫ Qemu Version 2.0.0 Update rc3
Qemu ≫ Qemu Version 2.0.2
Qemu ≫ Qemu Version 2.1.0
Qemu ≫ Qemu Version 2.1.0 Update rc0
Qemu ≫ Qemu Version 2.1.0 Update rc1
Qemu ≫ Qemu Version 2.1.0 Update rc2
Qemu ≫ Qemu Version 2.1.0 Update rc3
Qemu ≫ Qemu Version 2.1.0 Update rc5
Qemu ≫ Qemu Version 2.1.1
Canonical ≫ Ubuntu Linux Version 10.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 14.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.321
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://www.ubuntu.com/usn/USN-2409-1
Third Party Advisory
http://www.debian.org/security/2014/dsa-3044
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg03543.html
Patch
Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04598.html
Patch
Vendor Advisory
http://lists.nongnu.org/archive/html/qemu-devel/2014-09/msg04707.html
Patch
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-0349.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0624.html
Third Party Advisory
http://www.debian.org/security/2014/dsa-3045
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1144818
Issue Tracking