Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade linux-grsecUpgrade xenUpgrade linux-vanilla. | Aug 30, 2017 | Dec 17, 2015 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-guest-agent | Aug 17, 2018 | Dec 3, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Dec 3, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemu-develUpgrade qemuUpgrade xen-toolsUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm | Oct 16, 2024 | Oct 16, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade xen-doc-pdfUpgrade xen-develUpgrade xen-libsUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade xen-kmp-trace | Jan 4, 2016 | Dec 3, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-aarch64 | Dec 7, 2015 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub