Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmod-kvm-debugUpgrade qemu-kvmUpgrade kmod-kvmUpgrade kvm-toolsUpgrade xen-develUpgrade kvmUpgrade kvm-qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade xenUpgrade qemu-guest-agentUpgrade xen-libs | Dec 1, 2016 | Sep 28, 2015 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Sep 28, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-develUpgrade qemu-user-staticUpgrade qemu-sbruno | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Sep 28, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Sep 28, 2015 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 19, 2019 | Sep 28, 2015 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade qemu-kvmUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvmUpgrade qemu-guest-agentUpgrade kmod-kvm-debugUpgrade qemu-kvm-tools | May 17, 2016 | Sep 28, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2015 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-audio-ossUpgrade kvmUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-armUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-vga | Dec 18, 2015 | Sep 28, 2015 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-x86 | Nov 8, 2024 | Sep 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub