-
Prasad J Pandit authored
While activating device in vmxnet3_acticate_device(), it does not validate guest supplied configuration values against predefined minimum - maximum limits. This may lead to integer overflow or OOB access issues. Add checks to avoid it. Fixes: CVE-2021-20203 Buglink: https://bugs.launchpad.net/qemu/+bug/1913873 Reported-by:
Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by:
Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by:
Jason Wang <jasowang@redhat.com>Prasad J Pandit authoredWhile activating device in vmxnet3_acticate_device(), it does not validate guest supplied configuration values against predefined minimum - maximum limits. This may lead to integer overflow or OOB access issues. Add checks to avoid it. Fixes: CVE-2021-20203 Buglink: https://bugs.launchpad.net/qemu/+bug/1913873 Reported-by:
Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by:
Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by:
Jason Wang <jasowang@redhat.com>
Loading