NetSight
critical9.8

CVE-2018-17963

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have un…

Impact

qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
QemuQemu
through 3.0.0
Version 3.1.0
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 18.10
RedhatOpenstack
Versions 10, 13, 14
RedhatVirtualization
Version 4.0
RedhatVirtualization Manager
Version 4.3

Weakness classification

References