Wind River Support Network

HomeDefectsLIN5-19732
Fixed

LIN5-19732 : Security Advisory - qemu - CVE-2014-3640

Created: Nov 16, 2014    Updated: Dec 19, 2017
Resolved Date: Dec 29, 2014
Found In Version: 5.0.1.20
Fix Version: 5.0.1.23
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.<a href=http://cwe.mitre.org/data/definitions/476.html>CWE-476: NULL Pointer Dereference</a>

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3640

Other Downloads


Live chat
Online