Rapid7 VulnDB

SUSE Linux Security Vulnerability: CVE-2007-5729

Back to Search

SUSE Linux Security Vulnerability: CVE-2007-5729

Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
10/30/2007
Created
07/25/2018
Added
02/17/2015
Modified
07/04/2017

Description

The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers a heap-based buffer overflow in the slirp library, aka NE2000 "mtu" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the mtu overflow vulnerability.

Solution(s)

  • suse-upgrade-kvm

References

  • suse-upgrade-kvm

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;