Unscored severity · published Oct 30, 2007
CVE-2007-5730
Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen"…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
3.1; 4.0 · source: NVD
QE
Qemu · Qemu
0.8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5730
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5730
Broken Link
http://osvdb.org/42985
Third Party Advisory
http://secunia.com/advisories/25073
Third Party Advisory
http://secunia.com/advisories/25095
Third Party Advisory
http://secunia.com/advisories/27486
Third Party Advisory
http://secunia.com/advisories/29129
Third Party Advisory
http://secunia.com/advisories/29963
More from Debian Linux
10.0
CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
