]> xenbits.xensource.com Git - qemu-xen.git/commit
net: vmxnet3: validate configuration values during activate (CVE-2021-20203)
authorPrasad J Pandit <pjp@fedoraproject.org>
Sat, 30 Jan 2021 13:16:52 +0000 (18:46 +0530)
committerMichael Roth <michael.roth@amd.com>
Tue, 14 Dec 2021 23:39:20 +0000 (17:39 -0600)
commit1ce084af083b6958c8287ea742a008a105bc960d
tree03f39b530c20f7c336b0c826de740248d4028996
parentfec12fc8882b7326e820696ef81da3f1deeca11b
net: vmxnet3: validate configuration values during activate (CVE-2021-20203)

While activating device in vmxnet3_acticate_device(), it does not
validate guest supplied configuration values against predefined
minimum - maximum limits. This may lead to integer overflow or
OOB access issues. Add checks to avoid it.

Fixes: CVE-2021-20203
Buglink: https://bugs.launchpad.net/qemu/+bug/1913873
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
(cherry picked from commit d05dcd94aee88728facafb993c7280547eb4d645)
Signed-off-by: Michael Roth <michael.roth@amd.com>
hw/net/vmxnet3.c