oss-sec mailing list archives

CVE Request Qemu: net: e1000 infinite loop issue

From: P J P <ppandit () redhat com>
Date: Sat, 5 Sep 2015 01:30:35 +0530 (IST)

  Hello,

Qemu emulator built with the e1000 NIC emulation support is vulnerable to an
infinite loop issue. It could occur while processing transmit descriptor data
when sending a network packet.

A privileged user inside guest could use this flaw to crash the Qemu instance
resulting in DoS.

Upstream fix:
-------------
  -> https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg01199.html

Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

Current thread:

CVE Request Qemu: net: e1000 infinite loop issue P J P (Sep 04)
- Re: CVE Request Qemu: net: e1000 infinite loop issue cve-assign (Sep 05)
  - Re: CVE Request Qemu: net: e1000 infinite loop issue Qinghao Tang (Sep 05)
    - Re: Re: CVE Request Qemu: net: e1000 infinite loop issue Huzaifa Sidhpurwala (Sep 06)
    - Re: Re: CVE Request Qemu: net: e1000 infinite loop issue Qinghao Tang (Sep 07)
    - Re: Re: CVE Request Qemu: net: e1000 infinite loop issue Huzaifa Sidhpurwala (Sep 07)