CVE-2016-4002
CriticalSummary
Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
Risk Assessment
An attacker could exploit this vulnerability to remotely trigger a system crash or execute unauthorized code, posing a serious threat to the stability and security of the virtual environment.
Recommendation
It is recommended to update QEMU to the latest version that includes security patches and to limit the size of accepted packets in the guest NIC configuration.
Original NVD description (English source)
Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.