CVE-2014-0150: Qemu

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.

Affected products

• Qemu Qemu: up to and including 2.0; up to and including 2.0.0; version 0.1.0 only; version 0.1.1 only; version 0.1.2 only; version 0.1.3 only; …
• Red Hat Enterprise Linux: version 6.0 only

Published 2014-04-18. Last modified 2026-06-17.