Every CVE Search/ Get API key

CVE-2007-5730

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows...

7.2 HighFix available

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Exploit likelihood

0.61%Down 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
CVE-2007-5730
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
CVE-2007-5730
Updated
2026-11-02
EUVDEUVD-2007-5701 No score

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
EUVD-2007-5701
Updated
2026-11-03
GitHub AdvisoriesGHSA-w45x-fqpm-jpv8 No score

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows...

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
GHSA-w45x-fqpm-jpv8
Weakness
CWE-787
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
CVE-2007-5730
Updated
2026-11-02
OSVDEBIAN-CVE-2007-5730 No score

Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability.

Record
DEBIAN-CVE-2007-5730
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 0.9.0-2
0.9.0-2
qemu
Debian:13
 before 0.9.0-2
0.9.0-2
qemu
Debian:14
 before 0.9.0-2
0.9.0-2
qemu
Debian:3.1
From an advisory covering 6 CVEs
 before 0.6.1+20050407-1sarge1, plus listed versions
0.6.1+20050407-1
0.6.1+20050407-1sarge1
qemu
Debian:4.0
From an advisory covering 6 CVEs
 before 0.8.2-4etch1, plus listed versions
0.8.2-4
0.8.2-4etch1
xen
Red Hat:rhel_virtualization:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-debuginfo
Red Hat:rhel_virtualization:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-devel
Red Hat:rhel_virtualization:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
Show 7 moreShow less
Affected packages
PackageAffectedFixed
xen-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen
Red Hat:rhel_virtualization:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-debuginfo
Red Hat:rhel_virtualization:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-devel
Red Hat:rhel_virtualization:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5
xen-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 6 CVEs
 before 0:3.0.3-41.el5_1.5
0:3.0.3-41.el5_1.5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
aliases
affected, aliases, facts, published, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5730 is a high vulnerability (CVSS 7.2) in Qemu, published May 1, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in qemu 0.9.0-2.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open