CVE-2016-4002 PUBLISHED

Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.

EPSS 11.97% · 93.7th percentile

Risk Scores

EPSS Score
11.97%
93.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSqemu0, 1:2.3+dfsg-5ubuntu9, 1:2.3+dfsg-5ubuntu10
Ubuntu:14.04:LTSqemu1.7.0+dfsg-3ubuntu2, 1.7.0+dfsg-3ubuntu3, 1.7.0+dfsg-3ubuntu4

Timeline

References

Open in Interactive Console →