CVE-2015-7504
16.10.2017, 20:29
Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.Enginsight
| Vendor | Product | Version |
|---|---|---|
| qemu | qemu | 𝑥 ≤ 2.4.1 |
| qemu | qemu | 2.5.0:rc0 |
| qemu | qemu | 2.5.0:rc1 |
| qemu | qemu | 2.5.0:rc2 |
| xen | xen | * |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||
| qemu-kvm |
| ||||||||
| xen |
|
Common Weakness Enumeration
References