Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm | Dec 1, 2016 | Jan 8, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Jan 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade xen-toolsUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jan 8, 2016 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-guest-agent | May 17, 2016 | Jan 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 30, 2015 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemuUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade xenUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-hw-display-qxlUpgrade xen-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-langUpgrade xen-doc-pdfUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade xen-doc-htmlUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-chardev-baumUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-trace | Jan 8, 2016 | Jan 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-arm | Jan 8, 2016 | Dec 3, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub