The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Nov 6, 2015 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-htmlUpgrade qemu-hw-display-qxlUpgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade xen-toolsUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-audio-alsaUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-block-rbdUpgrade kvmUpgrade xen-doc-pdfUpgrade xen-libs | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-x86 | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub