REDHAT-BUG-1922441: Integer Overflow
An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg07935.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1922441?
The severity of REDHAT-BUG-1922441 is critical as it can lead to a denial-of-service (DoS) condition on the host.
How does REDHAT-BUG-1922441 affect QEMU?
REDHAT-BUG-1922441 affects QEMU by allowing a privileged guest user to crash the QEMU process due to an integer overflow in the vmxnet3 NIC emulator.
How do I fix REDHAT-BUG-1922441?
To fix REDHAT-BUG-1922441, apply the upstream patch provided by QEMU maintainers.
What versions of QEMU are affected by REDHAT-BUG-1922441?
REDHAT-BUG-1922441 affects multiple versions of QEMU that include the vmxnet3 NIC emulator.
Who can exploit REDHAT-BUG-1922441?
A privileged guest user can exploit REDHAT-BUG-1922441 by supplying invalid values for NIC parameters.