8.4

CVE-2016-2857

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.

Data is provided by the National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 2.5.1.1
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version15.10
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Debian ≫ Debian Linux Version8.0
Redhat ≫ Openstack Version5.0
   Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Virtualization Version3.0
   Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Virtualization Version4.0
   Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Openstack Version5.0
   Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Virtualization Version3.0
   Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Openstack Version6.0
Redhat ≫ Openstack Version7.0
Redhat ≫ Openstack Version8
Redhat ≫ Openstack Version9
Redhat ≫ Enterprise Linux Eus Version7.3
Redhat ≫ Enterprise Linux Eus Version7.4
Redhat ≫ Enterprise Linux Eus Version7.5
Redhat ≫ Enterprise Linux Eus Version7.6
Redhat ≫ Enterprise Linux Eus Version7.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.149
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.4 2 5.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
nvd@nist.gov 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securityfocus.com/bid/84130
Third Party Advisory
VDB Entry