Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Dec 1, 2016 | Jan 8, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Jan 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade xen-toolsUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 8, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | May 17, 2016 | Jan 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-s390Upgrade xen-kmp-traceUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-domUUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-langUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-audio-pa | Jan 8, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-ppc | Jan 8, 2016 | Dec 3, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub