Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Published

2015-08-12T14:59:24.197

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-908

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	xen	xen	≤ 4.5.0	Yes
Operating System	xen	xen	4.5.1	Yes
Operating System	fedoraproject	fedora	21	Yes
Operating System	fedoraproject	fedora	22	Yes
Application	suse	linux_enterprise_debuginfo	11	Yes
Operating System	suse	linux_enterprise_server	10	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	debian	debian_linux	7.0	Yes
Operating System	debian	debian_linux	8.0	Yes
Application	redhat	openstack	5.0	Yes
Application	redhat	openstack	6.0	Yes
Application	redhat	virtualization	3.0	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.1	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.2	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.3	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.4	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.5	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.6	Yes
Operating System	redhat	enterprise_linux_compute_node_eus	7.7	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_eus	6.7	Yes
Operating System	redhat	enterprise_linux_eus_compute_node	6.7	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian	6.0	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian	7.0	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	6.7_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.1_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.2_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.3_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.4_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.5_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.6_ppc64	Yes
Operating System	redhat	enterprise_linux_for_power_big_endian_eus	7.7_ppc64	Yes
Operating System	redhat	enterprise_linux_for_scientific_computing	6.0	Yes
Operating System	redhat	enterprise_linux_for_scientific_computing	7.0	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_server	7.0	Yes
Operating System	redhat	enterprise_linux_server_aus	7.3	Yes
Operating System	redhat	enterprise_linux_server_aus	7.4	Yes
Operating System	redhat	enterprise_linux_server_aus	7.6	Yes
Operating System	redhat	enterprise_linux_server_aus	7.7	Yes
Operating System	redhat	enterprise_linux_server_eus	7.1	Yes
Operating System	redhat	enterprise_linux_server_eus	7.2	Yes
Operating System	redhat	enterprise_linux_server_eus	7.3	Yes
Operating System	redhat	enterprise_linux_server_eus	7.4	Yes
Operating System	redhat	enterprise_linux_server_eus	7.5	Yes
Operating System	redhat	enterprise_linux_server_eus	7.6	Yes
Operating System	redhat	enterprise_linux_server_eus	7.7	Yes
Operating System	redhat	enterprise_linux_server_eus_from_rhui	6.7	Yes
Operating System	redhat	enterprise_linux_server_from_rhui	6.0	Yes
Operating System	redhat	enterprise_linux_server_from_rhui	7.0	Yes
Operating System	redhat	enterprise_linux_server_tus	7.3	Yes
Operating System	redhat	enterprise_linux_server_tus	7.6	Yes
Operating System	redhat	enterprise_linux_server_tus	7.7	Yes
Operating System	redhat	enterprise_linux_server_update_services_for_sap_solutions	7.2	Yes
Operating System	redhat	enterprise_linux_server_update_services_for_sap_solutions	7.3	Yes
Operating System	redhat	enterprise_linux_server_update_services_for_sap_solutions	7.4	Yes
Operating System	redhat	enterprise_linux_server_update_services_for_sap_solutions	7.6	Yes
Operating System	redhat	enterprise_linux_server_update_services_for_sap_solutions	7.7	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Operating System	redhat	enterprise_linux_workstation	7.0	Yes
Operating System	arista	eos	4.12	Yes
Operating System	arista	eos	4.13	Yes
Operating System	arista	eos	4.14	Yes
Operating System	arista	eos	4.15	Yes
Operating System	oracle	linux	7	Yes

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html Issue Tracking, Mailing List, Third Party Advisory ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html Issue Tracking, Mailing List, Third Party Advisory ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html Issue Tracking, Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html Issue Tracking, Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html Issue Tracking, Mailing List, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1674.html Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1683.html Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1739.html Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1740.html Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1793.html Issue Tracking, Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2015-1833.html Issue Tracking, Third Party Advisory ([email protected])
http://support.citrix.com/article/CTX201717 Broken Link, Third Party Advisory ([email protected])
http://www.debian.org/security/2015/dsa-3348 Third Party Advisory ([email protected])
http://www.debian.org/security/2015/dsa-3349 Third Party Advisory ([email protected])
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/76153 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1033176 Third Party Advisory, VDB Entry ([email protected])
http://xenbits.xen.org/xsa/advisory-140.html Patch, Vendor Advisory ([email protected])
https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 Third Party Advisory ([email protected])
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html Issue Tracking, Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1674.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1683.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1739.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1740.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1793.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2015-1833.html Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.citrix.com/article/CTX201717 Broken Link, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2015/dsa-3348 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2015/dsa-3349 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/76153 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1033176 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://xenbits.xen.org/xsa/advisory-140.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)