Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-7504

Опубликовано: 16 окт. 2017
Источник: nvd
CVSS3: 8.8
CVSS2: 4.6
EPSS Низкий

Описание

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 2.4.1 (включая)
cpe:2.3:a:qemu:qemu:2.5.0:rc0:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.5.0:rc1:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.5.0:rc2:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00712
Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 7 лет назад

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

redhat
больше 9 лет назад

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

CVSS3: 8.8
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 8.8
debian
больше 7 лет назад

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcn ...

CVSS3: 8.8
github
около 3 лет назад

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

EPSS

Процентиль: 71%
0.00712
Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787