CVE-2016-4002 — Classic Buffer Overflow in Qemu

CWE-120 — Classic Buffer Overflow10 documents7 sources
Severity
9.8CRITICALNVD
OSV5.0
EPSS
12.0%
top 6.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
QemuDebian QemuCanonical Ubuntu Linux+2 more
Timeline
PublishedApr 26
Latest updateMay 13

Description

Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/qemu< qemu 1:2.6+dfsg-2 (bookworm)
▶Debianqemu/qemu< 1:2.6+dfsg-2+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.24+1
▶NVDqemu/qemu2.6.2

Also affects: Debian Linux 8.0, Fedora 22, 23, 24, Ubuntu Linux 12.04, 14.04, 15.10, 16.04

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-7ff7-8hxh-9hrr: Buffer overflow in the mipsnet_receive function in hw/net/mipsnet↗2022-05-13
▶
OSV
qemu, qemu-kvm vulnerabilities↗2016-05-12
▶
OSV
CVE-2016-4002: Buffer overflow in the mipsnet_receive function in hw/net/mipsnet↗2016-04-26
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2016-05-12
▶
Red Hat
Qemu: net: buffer overflow in MIPSnet emulator↗2016-04-07
▶
Debian
CVE-2016-4002: qemu - Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, whe...↗2016
▶

💬Community

3
Bugzilla
CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator↗2016-04-11
▶
Bugzilla
CVE-2016-4002 Qemu: net: buffer overflow in MIPSnet emulator [fedora-all]↗2016-04-11
▶
Bugzilla
CVE-2016-4002 xen: Qemu: net: buffer overflow in MIPSnet emulator [fedora-all]↗2016-04-11
▶