The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Nov 6, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade xen-doc-htmlUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade xen-develUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade qemuUpgrade qemu-armUpgrade xen-kmp-traceUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade xenUpgrade qemu-langUpgrade xen-kmp-defaultUpgrade xen-libsUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade kvmUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade xen-doc-pdfUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-block-curl | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86 | Nov 8, 2024 | Jan 23, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub