Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
| CVE | CVE-2016-4002 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.8 / 10 |
| EPSS | 6.3% en 30 días (percentil 94) |
| CWE | CWE-120 |
| Exposición (Shodan) | 1 host(s) expuesto(s) en internet ahora mismo |
Productos afectados (catálogo NVD)
canonical/ubuntu_linuxdebian/debian_linuxfedoraproject/fedoraqemu/qemu