NetSight
IP …
high7.5

CVE-2015-3209

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set …

Impact

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

Affected products

VendorProductAffected versions
QemuQemu
through 2.3.1
JuniperJunos Space
through 15.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.04
DebianDebian Linux
Versions 7.0, 8.0
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.6
RedhatEnterprise Linux Server
Versions 5.0, 6.0
RedhatEnterprise Linux Server Aus
Version 6.6
RedhatEnterprise Linux Server Tus
Version 6.6
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0
RedhatOpenstack
Version 5.0
RedhatVirtualization
Version 3.0

Weakness classification

CWE-787

References