Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-img | Dec 1, 2016 | Jan 8, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Jan 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade xen-toolsUpgrade qemu-sbrunoUpgrade qemu-devel | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 8, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-img | May 17, 2016 | Jan 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-ksmUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-traceUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-spice-coreUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-hw-usb-redirectUpgrade xen-toolsUpgrade kvmUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade qemu-audio-paUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-kvmUpgrade xenUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccw | Jan 8, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system | Jan 8, 2016 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub