CVE-2015-5279 in QEMU

Resumen (Inglés)

Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.

Once again VulDB remains the best source for vulnerability data.

Reservar

2015-07-01

Divulgación

2015-09-28

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
77704	Fabrice Bellard QEMU ne2000_receive desbordamiento de búfer	119	No probado	Arreglo oficial	CVE-2015-5279

Fuentes

• MITRE
• NVD
• CVE Details