Buffer overflow in Qemu

CVE-2015-5279

Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.

Vulnerability class: Buffer Overflow

EPSS: 0.010 (60.7th percentile) — read the EPSS interpretation.

Affected products

  • Qemu
  • N/a — versions n/a

Weakness classification (CWE)

References