CVE-2015-7512

Severity: critical (CVSS 9.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-08 · updated 2026-06-17
Weakness: CWE-120

Description

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

Affected products

Debian Linux: 7.0, 8.0
Oracle Corporation Oracle Linux: 6
QEMU: through 2.4.1; 2.5.0-rc0, 2.5.0-rc1, 2.5.0-rc2
RedHat Enterprise Linux Desktop: 6.0
RedHat Enterprise Linux Eus: 6.7
RedHat Enterprise Linux Server: 6.0
RedHat Enterprise Linux Workstation: 6.0
OpenStack: 5.0
RedHat Virtualization: 3.0

References

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8b98a2f07175d46c3f7217639bd5e03f
http://rhn.redhat.com/errata/RHSA-2015-2694.html
http://rhn.redhat.com/errata/RHSA-2015-2695.html
http://rhn.redhat.com/errata/RHSA-2015-2696.html
http://www.debian.org/security/2016/dsa-3469
http://www.debian.org/security/2016/dsa-3470
http://www.debian.org/security/2016/dsa-3471
http://www.openwall.com/lists/oss-security/2015/11/30/3
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
http://www.securityfocus.com/bid/78230
http://www.securitytracker.com/id/1034527
https://security.gentoo.org/glsa/201602-01

Get alerted when CVE-2015-7512 or the next vulnerability affects your stack