CVE-2014-3640 in Fabrice Bellard QEMU
Summary
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
Reservation
05/14/2014
Disclosure
11/07/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67767 | Fabrice Bellard QEMU sosendto null pointer dereference | 476 | Unproven | Official fix | CVE-2014-3640 |