Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27156
HistorySep 21, 2020 - 6:39 a.m.

Buffer Overflow

2020-09-2106:39:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

20.6%

qemu is vulnerable to buffer overflow. hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.