hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Nov 9, 2015 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 9, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Nov 9, 2015 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Nov 9, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2015 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade kvmUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vga | Jun 13, 2016 | Nov 9, 2015 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-ppc | Dec 7, 2015 | Nov 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub