CVE-2024-3567
Qemu-kvm: net: assertion failure in update_sctp_checksum()
Summary
Qemu-kvm: net: assertion failure in update_sctp_checksum()
Original description
The description as published by the source.
A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-3567 qemu Fixed in: 1:8.2.3+ds-1
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- package gitlab.com
- report bugzilla.redhat.com
- report gitlab.com
- web access.redhat.com