The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Nov 6, 2015 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 31, 2020 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade qemu-sbrunoUpgrade qemu-devel | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Jan 31, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2020 |
| Suse | — | Upgrade xen-toolsUpgrade kvmUpgrade xen-kmp-paeUpgrade xen-kmp-traceUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-ui-openglUpgrade xen-doc-pdfUpgrade qemu-audio-ossUpgrade xen-develUpgrade xen-doc-htmlUpgrade qemuUpgrade qemu-vgabiosUpgrade xen-libs-32bitUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade xen-tools-domUUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-s390Upgrade qemu-ksmUpgrade xenUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirect | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 8, 2024 | Jan 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub