Threats tagged 'ghsa-3qx7-ff8p-6j2r'

A vulnerability in the virtio-net device of QEMU allows a privileged user in a guest virtual machine to cause a heap overflow on the host by enabling the RSS feature and setting excessively large values in the indirections_table. This can lead to a crash of the QEMU process on the host, resulting in a denial of service. The flaw is rated as moderate severity due to the requirement for privileged guest access. Mitigation involves disabling the RSS feature on the virtio-net device.