Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade libcacard-toolsUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacardUpgrade libcacard-develUpgrade qemu-guest-agent | Dec 1, 2016 | Nov 4, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade libcacardUpgrade qemu-kvmUpgrade libcacard-tools | Oct 16, 2024 | Nov 4, 2014 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64 | Nov 8, 2024 | Nov 4, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub