vulnerability

Gentoo Linux: CVE-2015-7504: QEMU: Multiple vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
5	(AV:L/AC:L/Au:N/C:P/I:P/A:P)	Oct 16, 2017	Oct 30, 2017	Mar 31, 2026

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

Published

Oct 16, 2017

Added

Oct 30, 2017

Modified

Mar 31, 2026

Description

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

Solutions

gentoo-linux-upgrade-app-emulation-pvgrubgentoo-linux-upgrade-app-emulation-qemugentoo-linux-upgrade-app-emulation-xengentoo-linux-upgrade-app-emulation-xen-pvgrubgentoo-linux-upgrade-app-emulation-xen-tools

References

CVE-2015-7504
https://attackerkb.com/topics/CVE-2015-7504
CWE-787
EUVD-EUVD-2015-7425
GENTOO-201602-01
GENTOO-201604-03
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-7425

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today