Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2015-7504

Description

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

POC

Reference

No PoCs from references.

Github

- https://github.com/Live-Hack-CVE/CVE-2015-7504

- https://github.com/Resery/Learning_Note

- https://github.com/Resery/Learning_Record

- https://github.com/SplendidSky/vm_escape

- https://github.com/WinMin/awesome-vm-exploit

- https://github.com/ashishdas009/dynamic-syscall-filtering-for-qemu

- https://github.com/jiayy/android_vuln_poc-exp

- https://github.com/mtalbi/vm_escape

- https://github.com/ray-cp/Vuln_Analysis