CVE-2014-3640 in Fabrice Bellard QEMU
Résumé (Anglaise)
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.
Réserver
14/05/2014
Divulgation
07/11/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 67767 | Fabrice Bellard QEMU sosendto déni de service | 476 | Non prouvée | Correctif officiel | CVE-2014-3640 |