Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-vanilla.Upgrade xenUpgrade linux-grsecUpgrade qemu | Aug 30, 2017 | Dec 17, 2015 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-img | Aug 17, 2018 | Dec 3, 2015 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Dec 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu-sbrunoUpgrade xen-tools | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/pvgrub.Upgrade app-emulation/qemu.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm | Oct 16, 2024 | Oct 16, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xen-kmp-traceUpgrade xen-libs-32bitUpgrade xenUpgrade xen-libsUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-pdfUpgrade xen-kmp-paeUpgrade xen-devel | Jan 4, 2016 | Dec 3, 2015 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-arm | Dec 7, 2015 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub