Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
Max CVSS
9.0
EPSS Score
3.22%
Published
2016-01-08
Updated
2023-02-13
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
Max CVSS
8.6
EPSS Score
1.10%
Published
2016-01-12
Updated
2023-02-13
2 vulnerabilities found