Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade kvmUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade qemu-img | Dec 1, 2016 | Jun 15, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvmUpgrade xen | Jul 30, 2024 | Jun 15, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-sbrunoUpgrade qemu-develUpgrade xen-tools | Dec 10, 2025 | Jun 26, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools.Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade kvmUpgrade qemu-guest-agent | Oct 16, 2024 | Jun 15, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade xen-libs-32bitUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade kvmUpgrade qemu-kvmUpgrade qemu-s390Upgrade xen-develUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-s390xUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-traceUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade xen-doc-htmlUpgrade qemu-audio-alsaUpgrade qemu-arm | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Nov 8, 2024 | Jun 15, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub