CVE-2015-7504: Buffer Overflow
Heap-based buffer overflow in the pcnetreceive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7504?
CVE-2015-7504 has a high severity due to its potential for causing denial of service and executing arbitrary code.
How do I fix CVE-2015-7504?
To fix CVE-2015-7504, upgrade QEMU to versions later than 2.4.1 and include all security patches.
What causes CVE-2015-7504?
CVE-2015-7504 is caused by a heap-based buffer overflow in the pcnet_receive function within QEMU.
Which systems are affected by CVE-2015-7504?
CVE-2015-7504 affects QEMU versions up to 2.4.1 and specific release candidates of version 2.5.0.
Can CVE-2015-7504 lead to remote code execution?
Yes, CVE-2015-7504 can potentially allow an attacker to execute arbitrary code through specially crafted packets.