2.1

CVE-2014-3640

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version7.0
Qemu ≫ Qemu Version2.0.0 Update-
Qemu ≫ Qemu Version2.0.0 Updaterc0
Qemu ≫ Qemu Version2.0.0 Updaterc1
Qemu ≫ Qemu Version2.0.0 Updaterc2
Qemu ≫ Qemu Version2.0.0 Updaterc3
Qemu ≫ Qemu Version2.0.2
Qemu ≫ Qemu Version2.1.0
Qemu ≫ Qemu Version2.1.0 Updaterc0
Qemu ≫ Qemu Version2.1.0 Updaterc1
Qemu ≫ Qemu Version2.1.0 Updaterc2
Qemu ≫ Qemu Version2.1.0 Updaterc3
Qemu ≫ Qemu Version2.1.0 Updaterc5
Qemu ≫ Qemu Version2.1.1
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.156
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.