CVE-2014-0150
Not scored
CVE-2014-0150
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
Exploit probability
0.7%
Published
April 18, 2014
Required by
Not available
Last source change
April 16, 2026
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2014-0150
View original source
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.
05 / REFERENCES
Further evidence
- http://article.gmane.org/gmane.comp.emulators.qemu/266768
- http://secunia.com/advisories/57878
- http://secunia.com/advisories/58191
- http://thread.gmane.org/gmane.comp.emulators.qemu/266713
- http://www.debian.org/security/2014/dsa-2909
- http://www.debian.org/security/2014/dsa-2910
- http://www.ubuntu.com/usn/USN-2182-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1078846