peter bassill · operator
$ cve CVE-2015-7512 JSON

CVE-2015-7512

9.0
CRITICAL · CVSS 3.1 · EPSS 7.7% (pctl 94)

In your normal cycle

Critical by CVSS (9), but no sign of active exploitation.

Description

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

Scoring

CVSS9.0 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS7.73% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-120
On CISA KEVno
Public exploitnone known
Published2016-01-08
Last modified2026-06-17

Affected (9)

VendorProduct
debiandebian linux
oraclelinux
qemuqemu
redhatenterprise linux desktop
redhatenterprise linux eus
redhatenterprise linux server
redhatenterprise linux workstation
redhatopenstack
redhatvirtualization

References

→ the Explorer  ·  watch your stack  ·  NVD