Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm | Dec 1, 2016 | Jan 8, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Jan 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade xen-toolsUpgrade qemu-user-staticUpgrade qemuUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 8, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm | May 17, 2016 | Jan 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade xen-kmp-traceUpgrade qemu-seabiosUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemuUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade xen-doc-pdfUpgrade xenUpgrade xen-tools-domUUpgrade xen-libs-32bitUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade xen-develUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-x86Upgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade kvm | Jan 8, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mips | Jan 8, 2016 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub