Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade libcacardUpgrade libcacard-devel | Dec 1, 2016 | Nov 4, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-develUpgrade qemu-guest-agentUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade libcacardUpgrade qemu-kvm | Oct 16, 2024 | Nov 4, 2014 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-misc | Nov 8, 2024 | Nov 4, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub