VULNERABILITY INTELLIGENCE

CVE-2014-0150

CVSS score4.9 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2014-04-18
Last modified2026-06-17
CVSS vectorAV:A/AC:M/Au:S/C:P/I:P/A:P

Description

Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.

Primary references