CVE-2024-3567

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 10, 2024
Updated: Jun 10, 2024
CWE ID 617

Summary

CVE-2024-3567: A vulnerability was identified in QEMU's net_tx_pkt.c file. The issue lies within the update_sctp_checksum() function and occurs when processing short-sized fragmented packets. The flaw results in an assertion failure, leading to a crash of QEMU, thereby causing a denial of service condition for the host system.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • QEMU
  • Red Hat Enterprise Linux

Affected Vendors

  • Qemu
  • Red Hat