Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsecUpgrade xenUpgrade qemuUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Aug 17, 2018 | Dec 3, 2015 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Dec 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemu-develUpgrade qemuUpgrade qemu-user-staticUpgrade xen-toolsUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/pvgrub.Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm | Oct 16, 2024 | Oct 16, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade xen-libsUpgrade xen-doc-pdfUpgrade xen-develUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domUUpgrade xen-kmp-traceUpgrade xen-libs-32bitUpgrade xenUpgrade xen-kmp-defaultUpgrade xen-doc-html | Jan 4, 2016 | Dec 3, 2015 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64 | Dec 7, 2015 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub