CVE ID:	CVE-2014-0150
Description:	Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
Test IDs:	1.3.6.1.4.1.25623.1.0.881925   1.3.6.1.4.1.25623.1.0.702909   1.3.6.1.4.1.25623.1.0.871161   1.3.6.1.4.1.25623.1.1.4.2014.0816.1   1.3.6.1.4.1.25623.1.0.702910
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0150 57878 http://secunia.com/advisories/57878 58191 http://secunia.com/advisories/58191 DSA-2909 http://www.debian.org/security/2014/dsa-2909 DSA-2910 http://www.debian.org/security/2014/dsa-2910 USN-2182-1 http://www.ubuntu.com/usn/USN-2182-1 [Qemu-devel] 20140411 Re: [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun http://article.gmane.org/gmane.comp.emulators.qemu/266768 [Qemu-devel] 20140411 [PATCH for-2.0] virtio-net: fix guest-triggerable buffer overrun http://thread.gmane.org/gmane.comp.emulators.qemu/266713 https://bugzilla.redhat.com/show_bug.cgi?id=1078846 https://bugzilla.redhat.com/show_bug.cgi?id=1078846