Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvmUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade qemu-imgUpgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade kmod-kvm-debug | Dec 1, 2016 | Jun 15, 2015 |
| Debian | — | Upgrade xenUpgrade qemuUpgrade qemu-kvm | Jul 30, 2024 | Jun 15, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade xen-toolsUpgrade qemu-develUpgrade qemu-sbrunoUpgrade qemu | Dec 10, 2025 | Jun 26, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/qemu.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade qemu-kvmUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade kvmUpgrade qemu-kvm-tools | Oct 16, 2024 | Jun 15, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade xen-doc-pdfUpgrade qemu-audio-spiceUpgrade qemu-toolsUpgrade xen-toolsUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade xen-libsUpgrade xenUpgrade qemuUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade xen-develUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade xen-kmp-traceUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-hw-display-qxlUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade xen-kmp-paeUpgrade qemu-audio-pa | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-ppc | Nov 8, 2024 | Jun 15, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub