Description
QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://bugs.launchpad.net/qemu/+bug/1886362 ↗
- https://lists.gnu.org/archive/html/qemu-devel/2020-07/msg05304.html ↗
- https://www.openwall.com/lists/oss-security/2020/07/21/3 ↗
- https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html ↗
- https://security.gentoo.org/glsa/202208-27 ↗
- https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html ↗