Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 23, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | May 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | May 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 7, 2016 |
| Suse | — | Upgrade xen-kmp-traceUpgrade xen-doc-htmlUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade xenUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-toolsUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-langUpgrade xen-libsUpgrade qemu-seabiosUpgrade xen-develUpgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu | Jun 13, 2016 | May 23, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-s390x | May 12, 2016 | May 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub