CVE-2015-7512

Critical

Published: 08/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the pcnet_receive function in QEMU when a guest NIC has a larger MTU allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

Risk Assessment

Attackers can exploit this vulnerability to remotely crash the guest operating system, leading to service downtime. There is also a risk of arbitrary code execution, which could lead to further system compromises.

Recommendation

It is recommended to update QEMU to the latest version to mitigate this vulnerability. Additionally, monitor network traffic and limit MTU for guest NICs if possible.

Original NVD description (English source)

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.