Homepage

Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package qemu-kvm  (opens in a new tab)

Threat Intelligence

EPSS
0.4% (34th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1204-QEMUKVM-620038
  • published10 Dec 2016
  • disclosed10 Dec 2016
Report a new vulnerability Found a mistake?

Introduced: 10 Dec 2016

CVE-2016-6888  (opens in a new tab)
CWE-190  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream qemu-kvm package and not the qemu-kvm package as distributed by Ubuntu.

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.