| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | = 2.7.0≤ 2.6.2 | |
| openstack | = 10= 11= 6.0= 7.0= 8= 9 | |
| virtualization | = 4.0 |
Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free