NetSight
IP …
medium4.9

CVE-2014-0150

Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a …

Impact

Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
QemuQemu
through 2.0
through 2.0.0
Versions 0.1.0, 0.1.1, 0.1.2, 0.1.3
RedhatEnterprise Linux
Version 6.0

Weakness classification

CWE-189

References