CVE-2015-8701

QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error

published December 29, 2016

CVSS
—
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit (tx) descriptors in 'tx_consume' routine, if a descriptor was to have more than allowed (ROCKER_TX_FRAGS_MAX=16) fragments. A privileged user inside guest could use this flaw to cause memory leakage on the host or crash the QEMU process instance resulting in DoS issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00391 · 31.7th percentile
Published
2016-12-29T22:00Z
EPSS history
Timeline
  • 29 DEC 22:00Z
    QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error
    cvelistv5