CVE-2014-0150

CVE-2014-0150 describes an integer overflow vulnerability in the virtio_net_handle_mac function within QEMU versions 2.0 and earlier, impacting products like Red Hat Enterprise Linux. This flaw allows authenticated local guest users to execute arbitrary code on the host system by triggering a heap-based buffer overflow through a crafted MAC address table update request. The vulnerability has a CVSS score of 4.9, indicating a medium severity, and requires network access and medium attack complexity for exploitation, potentially leading to partial confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.