CVE-2015-5278

CVE-2015-5278: vulnerability in QEMU

Published · Updated

Follow this CVE+ Monitor QEMU+ Monitor qemu

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%
The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
Affected products
QEMU · QEMU
Related CVEs — QEMU

In the same product, most dangerous first.

CVE-2015-5239—CVE-2015-5239EPSS 3.6%CVE-2015-5745—CVE-2015-5745EPSS 3.0%CVE-2015-6815—CVE-2015-6815EPSS 1.0%CVE-2025-54567MEDIUMCVE-2025-54567EPSS 0.3%CVE-2025-54566MEDIUMCVE-2025-54566EPSS 0.3%