CVE-2015-7512: Buffer Overflow
Published Jan 8, 2016
·Updated
Buffer overflow in the pcnetreceive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
Affected Software
14 affected components
Qemu Qemu<=2.4.1
Qemu Qemu=2.5.0-rc0
Qemu Qemu=2.5.0-rc1
Qemu Qemu=2.5.0-rc2
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.7
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
redhat Openstack=5.0
redhat Virtualization=3.0
redhat Enterprise Linux Server=6.0
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Oracle Linux=6
Event History
Jan 8, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7512?
CVE-2015-7512 has a high severity due to its potential to cause a denial of service or allow remote code execution.
2
How do I fix CVE-2015-7512?
To fix CVE-2015-7512, upgrade to QEMU version 2.5.0-rc3 or later.
3
What systems are affected by CVE-2015-7512?
CVE-2015-7512 affects multiple versions of QEMU, specifically those up to version 2.4.1 and 2.5.0-rc0 to 2.5.0-rc2.
4
What type of vulnerability is CVE-2015-7512?
CVE-2015-7512 is a buffer overflow vulnerability located in the pcnet_receive function within QEMU.
5
Can CVE-2015-7512 lead to data breaches?
Yes, CVE-2015-7512 can potentially allow attackers to execute arbitrary code, leading to data breaches.