Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacardUpgrade libcacard-develUpgrade qemu-guest-agent | Dec 1, 2016 | Nov 4, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade libcacardUpgrade qemu-kvm-commonUpgrade libcacard-toolsUpgrade qemu-imgUpgrade libcacard-develUpgrade qemu-guest-agentUpgrade qemu-kvm-tools | Oct 16, 2024 | Nov 4, 2014 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-mips | Nov 8, 2024 | Nov 4, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub