CVE-2007-5730

Summary

CVE	CVE-2007-5730
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2007-10-30 22:46:00 UTC
Updated	2026-04-23 00:35:47 UTC
Description	Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Risk And Classification

Primary CVSS: v2.0 7.2 from [email protected]

AV:L/AC:L/Au:N/C:C/I:C/A:C

Problem Types: CWE-787 | n/a

CVSS v2.0 Breakdown

Access Vector

Local

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:L/AC:L/Au:N/C:C/I:C/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Debian	Debian Linux	3.1	All	All	All
Operating System	Debian	Debian Linux	4.0	All	All	All
Application	Qemu	Qemu	0.8.2	All	All	All
Operating System	Xen	Xen	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
taviso.decsystem.org/virtsec.pdf	af854a3a-2127-422b-91ae-364da2661108	taviso.decsystem.org	Technical Description, Third Party Advisory
Repository / Oval Repository	af854a3a-2127-422b-91ae-364da2661108	oval.cisecurity.org	Third Party Advisory
osvdb.org/42985	af854a3a-2127-422b-91ae-364da2661108	osvdb.org	Broken Link
[VIM] Clarification on old QEMU/NE2000/Xen issues	af854a3a-2127-422b-91ae-364da2661108	www.attrition.org	Third Party Advisory
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	af854a3a-2127-422b-91ae-364da2661108	www.vupen.com	Third Party Advisory
KVM Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com	Third Party Advisory, VDB Entry
Debian update for qemu - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Debian -- Security Information -- DSA-1284-1 qemu	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
Mandriva update for xen - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Red Hat update for xen - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Support / Security / Advisories / / MDKSA-2007:203 \| Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com	Third Party Advisory
Support / Security / Advisories / / MDVSA-2008:162 \| Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com	Third Party Advisory
rhn.redhat.com \| Red Hat Support	af854a3a-2127-422b-91ae-364da2661108	www.redhat.com	Third Party Advisory
QEMU Multiple Local Vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
QEMU Various Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory, Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Organization	Published	Contributor	Statement
Red Hat	2007-11-02	Mark J Cox	Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2007-5729 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

There are currently no legacy QID mappings associated with this CVE.