CVE-2016-4001: Buffer Overflow
Buffer overflow in the stellarisenetreceive function in hw/net/stellarisenet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4001?
CVE-2016-4001 is considered a high severity vulnerability due to its potential to cause a denial of service by crashing QEMU.
How do I fix CVE-2016-4001?
To fix CVE-2016-4001, you should update QEMU to a version later than 2.5.1.1 or to a stable release following 2.6.0-rc1.
Which versions of QEMU are affected by CVE-2016-4001?
CVE-2016-4001 affects QEMU versions up to and including 2.5.1.1 and specific release candidates like 2.6.0-rc0 and 2.6.0-rc1.
What causes the buffer overflow in CVE-2016-4001?
The buffer overflow in CVE-2016-4001 is triggered when the Stellaris ethernet controller in QEMU is configured to accept large packets.
Can CVE-2016-4001 be exploited remotely?
Yes, CVE-2016-4001 can be exploited remotely, allowing attackers to crash QEMU by sending a large packet.