CVE-2016-4001 — Classic Buffer Overflow in Qemu

CWE-120 — Classic Buffer Overflow10 documents7 sources
Severity
8.6HIGHNVD
OSV5.0
EPSS
9.4%
top 7.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
QemuDebian QemuCanonical Ubuntu Linux+2 more
Timeline
PublishedMay 23
Latest updateMay 13

Description

Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 3.9 | Impact: 4.0

Affected Packages4 packages

▶debiandebian/qemu< qemu 1:2.6+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:2.6+dfsg-1+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.24+1
▶NVDqemu/qemu2.5.1.1+1

Also affects: Debian Linux 8.0, Fedora 22, 23, 24, Ubuntu Linux 12.04, 14.04, 15.10, 16.04

Patches

Patch: lists.gnu.org ↗Patch: lists.gnu.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-gq5h-q589-jxr5: Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet↗2022-05-13
▶
OSV
CVE-2016-4001: Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet↗2016-05-23
▶
OSV
qemu, qemu-kvm vulnerabilities↗2016-05-12
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2016-05-12
▶
Red Hat
Qemu: net: buffer overflow in stellaris_enet emulator↗2016-04-07
▶
Debian
CVE-2016-4001: qemu - Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet....↗2016
▶

💬Community

3
Bugzilla
CVE-2016-4001 Qemu: net: buffer overflow in stellaris_enet emulator↗2016-04-11
▶
Bugzilla
CVE-2016-4001 xen: Qemu: net: buffer overflow in stellaris_enet emulator [fedora-all]↗2016-04-11
▶
Bugzilla
CVE-2016-4001 Qemu: net: buffer overflow in stellaris_enet emulator [fedora-all]↗2016-04-11
▶