NetSight
IP …
low2.1

CVE-2014-3640

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet wi…

Impact

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.

Affected products

VendorProductAffected versions
DebianDebian Linux
Version 7.0
QemuQemu
Versions 2.0.0, 2.0.2, 2.1.0, 2.1.1
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Hpc Node
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10

Weakness classification

CWE-476

References