CVE-2016-4001: Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellar...

Security readout for executives and security teams

CVE-2016-4001 is a QEMU denial-of-service flaw. If a virtual machine uses the emulated Stellaris Ethernet controller and it accepts oversized packets, a large packet can crash QEMU. The business impact is service disruption for workloads relying on that emulation path, not proven data theft or code execution. Exposure appears limited to QEMU deployments using the emulated Stellaris Ethernet controller. The source bundle does not provide affected version ranges, default configuration status, or evidence that common server VM profiles are affected. Treat as a targeted availability risk. Prioritize patching where QEMU hosts run exposed or legacy emulated network devices, but do not escalate as actively exploited based on the provided evidence. Mitigation focus: Apply QEMU security updates from the relevant OS or QEMU vendor channel.; Confirm the packet-length validation patch is included in deployed QEMU builds.; Avoid exposing affected emulated networking paths to untrusted network traffic where practical..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.