Prasad J Pandit d05dcd94ae net: vmxnet3: validate configuration values during activate (CVE-2021-20203) ...

While activating device in vmxnet3_acticate_device(), it does not
validate guest supplied configuration values against predefined
minimum - maximum limits. This may lead to integer overflow or
OOB access issues. Add checks to avoid it.

Fixes: CVE-2021-20203
Buglink: https://bugs.launchpad.net/qemu/+bug/1913873
Reported-by: Gaoning Pan <pgn@zju.edu.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>

2021-11-19 11:43:47 +08:00

..

can

hw/net/can: sja1000 fix buff2frame_bas and buff2frame_pel when dlc is out of std CAN 8 bytes

2021-08-02 12:19:18 +08:00

fsl_etsec

…

rocker

net/rocker: use GDateTime for formatting timestamp in debug messages

2021-07-14 14:15:52 +01:00

allwinner_emac.c

…

allwinner-sun8i-emac.c

…

cadence_gem.c

…

dp8393x.c

dp8393x: don't force 32-bit register access

2021-07-11 22:29:54 +02:00

e1000_regs.h

…

e1000.c

e1000: fix tx re-entrancy problem

2021-11-05 11:31:42 +08:00

e1000e_core.c

hw/net: e1000e: Don't zero out the VLAN tag in the legacy RX descriptor

2021-08-02 12:19:18 +08:00

e1000e_core.h

…

e1000e.c

hw/net: e1000e: Correct the initial value of VET register

2021-08-02 12:19:18 +08:00

e1000x_common.c

…

e1000x_common.h

…

eepro100.c

…

etraxfs_eth.c

…

ftgmac100.c

…

i82596.c

Do not include sysemu/sysemu.h if it's not really necessary

2021-05-02 17:24:50 +02:00

i82596.h

…

imx_fec.c

hw/net/imx_fec: return 0xffff when accessing non-existing PHY

2021-05-27 11:03:07 +08:00

Kconfig

…

lan9118.c

…

lance.c

…

lasi_i82596.c

Do not include sysemu/sysemu.h if it's not really necessary

2021-05-02 17:24:50 +02:00

mcf_fec.c

…

meson.build

Drop the deprecated lm32 target

2021-05-12 18:20:25 +02:00

mipsnet.c

…

msf2-emac.c

Do not include exec/address-spaces.h if it's not really necessary

2021-05-02 17:24:51 +02:00

ne2000-isa.c

…

ne2000-pci.c

…

ne2000.c

…

ne2000.h

…

net_rx_pkt.c

…

net_rx_pkt.h

…

net_tx_pkt.c

hw/net/net_tx_pkt: Fix crash detected by fuzzer

2021-07-19 09:33:39 +02:00

net_tx_pkt.h

…

npcm7xx_emc.c

…

opencores_eth.c

…

pcnet-pci.c

…

pcnet.c

…

pcnet.h

…

rtl8139.c

…

smc91c111.c

…

spapr_llan.c

Do not include cpu.h if it's not really necessary

2021-05-02 17:24:51 +02:00

stellaris_enet.c

…

sungem.c

…

sunhme.c

…

trace-events

dp8393x: convert to trace-events

2021-07-02 17:35:08 +02:00

trace.h

…

tulip.c

…

tulip.h

…

vhost_net-stub.c

vhost-net: control virtqueue support

2021-10-20 04:44:05 -04:00

vhost_net.c

vhost: Fix last vq queue index of devices with no cvq

2021-11-11 03:13:05 -05:00

virtio-net.c

virtio-net: vhost control virtqueue support

2021-10-20 04:44:05 -04:00

vmware_utils.h

…

vmxnet3_defs.h

…

vmxnet3.c

net: vmxnet3: validate configuration values during activate (CVE-2021-20203)

2021-11-19 11:43:47 +08:00

vmxnet3.h

…

vmxnet_debug.h

…

xen_nic.c

Revert "net: Move NetClientState.info_str to dynamic allocations"

2021-04-08 17:33:59 +08:00

xgmac.c

hw: Do not include qemu/log.h if it is not necessary

2021-05-02 17:24:50 +02:00

xilinx_axienet.c

…

xilinx_ethlite.c

…