Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade kmod-kvm | Dec 1, 2016 | Jun 15, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvmUpgrade xen | Jul 30, 2024 | Jun 15, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade xen-toolsUpgrade qemu-develUpgrade qemuUpgrade qemu-sbruno | Dec 10, 2025 | Jun 26, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Oct 16, 2024 | Jun 15, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade qemu-guest-agentUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade kvmUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade xen-toolsUpgrade qemu-audio-spiceUpgrade xen-develUpgrade xen-doc-pdfUpgrade xenUpgrade qemu-microvmUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade xen-libsUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade xen-kmp-traceUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade xen-tools-domUUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade xen-doc-html | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system | Nov 8, 2024 | Jun 15, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub