CVE-2015-7512

CRITICAL · 9.0 CVSS Gepubliceerd: 08-01-2016 CWE-120

Beschrijving

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

Vendors

Qemu Redhat Debian Oracle

Affected products

Qemu Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Workstation Openstack Virtualization Debian Linux Linux

References

git.qemu.org
rhn.redhat.com
rhn.redhat.com
rhn.redhat.com
www.debian.org
www.debian.org
www.debian.org
www.openwall.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
security.gentoo.org