The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 3.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Nov 6, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Jul 30, 2024 | Jan 31, 2020 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 31, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 31, 2020 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-develUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade qemu-ppcUpgrade xen-kmp-traceUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-langUpgrade xen-libsUpgrade qemu-audio-paUpgrade qemu-armUpgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-audio-spiceUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xenUpgrade qemu-sgabiosUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-x86Upgrade qemu-block-curl | Dec 18, 2015 | Sep 24, 2015 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-x86 | Nov 8, 2024 | Jan 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub