CVSS 3.1
9.0 criticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2015-7512
Critical (9.0). EPSS 7.7% chance of exploitation in the next 30 days.
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
Severity
- EPSS
- 7.7% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- oracle:linux
- qemu:qemu
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_server
- redhat:enterprise_linux_workstation
- redhat:openstack
- redhat:virtualization