Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Apr 26, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 26, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Apr 26, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Apr 26, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 7, 2016 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-langUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade xen-kmp-traceUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemuUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade qemu-audio-ossUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade xen-libsUpgrade xen-doc-pdfUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpu-pci | Jun 13, 2016 | Apr 26, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-kvm | May 12, 2016 | Apr 26, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub