CVE-2014-3640

A NULL pointer dereference flaw was found in the way QEMU handled UDP packets with a source port and address of 0 when QEMU's user networking was in use. A local guest user could use this flaw to crash the guest.

This issue did not affect the kvm package as shipped with Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this issue as having Low security impact. Future qemu-kvm updates for Red Hat Enterprise Linux 6 and 7 may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.