xen: information disclosure
| Package(s): | xen | CVE #(s): | CVE-2016-6835 | ||||||||||||||||||||||||
| Created: | October 7, 2016 | Updated: | October 12, 2016 | ||||||||||||||||||||||||
| Description: | From the SUSE bug report:
Quick Emulator(Qemu) built with the VMWARE VMXNET3 NIC device support is vulnerable to an OOB read access. In that it does not check if packet headers does not check for IP header length. It could lead to a OOB access when reading further packet data. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||