CVE-2016-6835

CVE-2016-6835 describes a denial-of-service vulnerability in QEMU's vmxnet_tx_pkt_parse_headers function, affecting Debian and Red Hat distributions. This flaw, stemming from a failure to validate IP header length, allows a local guest OS administrator to trigger a buffer over-read. With a CVSS score of 6.0 (Medium), the vulnerability requires high privileges to exploit and could lead to a denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.