CVE-2015-5165
NoneCVSS
—
EPSS
13.3%
Published
Aug 12, 2015
CISA due date
—
The record
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | qemu | 0 | 1:2.4+dfsg-1a |
| Debian:11 | xen | 0 | 4.4.0-1 |
| Debian:12 | qemu | 0 | 1:2.4+dfsg-1a |
| Debian:12 | xen | 0 | 4.4.0-1 |
| Debian:13 | qemu | 0 | 1:2.4+dfsg-1a |
| Debian:13 | xen | 0 | 4.4.0-1 |
| Debian:7 | qemu-kvm | 0 | 1.1.2+dfsg-6+deb7u9 |
| Debian:7 | xen | 0 | 4.1.6.1-1+deb7u1 |
| Debian:8 | qemu | 0 | 1:2.1+dfsg-12+deb8u2 |
| Mageia:4 | qemu | 0 | 1.6.2-1.16.mga4 |
| Mageia:5 | qemu | 0 | 2.1.3-2.6.mga5 |
| Mageia:5 | xen | 0 | 4.5.2-1.5.mga5 |
| Red Hat:enterprise_linux:6::client | qemu-guest-agent | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::client | qemu-img | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::client | qemu-kvm | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::client | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::client | qemu-kvm-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | qemu-guest-agent | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | qemu-img | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-img-rhev | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::server | qemu-guest-agent | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::server | qemu-img | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::server | qemu-kvm | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::server | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::server | qemu-kvm-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | qemu-guest-agent | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | qemu-img | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:enterprise_linux:7::client | libcacard | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | libcacard-devel | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | libcacard-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | qemu-img | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | qemu-kvm | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | libcacard | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | libcacard-devel | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | libcacard-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | qemu-img | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:enterprise_linux:7::server | libcacard | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | libcacard-devel | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | libcacard-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | qemu-img | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | qemu-kvm | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | libcacard | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | libcacard-devel | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | libcacard-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | qemu-img | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.6 |
| Red Hat:openstack:5::el6 | qemu-img-rhev | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev-debuginfo | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev-tools | 0 | 2:0.12.1.2-2.479.el6_7.1 |
| Red Hat:openstack:5::el7 | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:5::el7 | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:6::el7 | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.8 |
| Red Hat:openstack:7::el7 | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.8 |
| SUSE:Linux Enterprise Desktop 11 SP3 | xen | 0 | 4.2.5_12-15.1 |
| SUSE:Linux Enterprise Desktop 11 SP4 | xen | 0 | 4.4.2_12-23.1 |
| SUSE:Linux Enterprise Desktop 12 | xen | 0 | 4.4.2_10-22.8.1 |
| SUSE:Linux Enterprise Server 11 SP1-LTSS | xen | 0 | 4.0.3_21548_18-29.1 |
| SUSE:Linux Enterprise Server 11 SP2-LTSS | xen | 0 | 4.1.6_08-17.1 |
| SUSE:Linux Enterprise Server 11 SP3 | xen | 0 | 4.2.5_12-15.1 |
| SUSE:Linux Enterprise Server 11 SP3-TERADATA | xen | 0 | 4.2.5_12-15.1 |
| SUSE:Linux Enterprise Server 11 SP4 | xen | 0 | 4.4.2_12-23.1 |
| SUSE:Linux Enterprise Server 12 | xen | 0 | 4.4.2_10-22.8.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP3 | xen | 0 | 4.2.5_12-15.1 |
| SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | xen | 0 | 4.4.2_12-23.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | xen | 0 | 4.4.2_10-22.8.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP3 | xen | 0 | 4.2.5_12-15.1 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | xen | 0 | 4.4.2_12-23.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | xen | 0 | 4.4.2_10-22.8.1 |
| Ubuntu:14.04:LTS | qemu | 0 | 2.0.0+dfsg-2ubuntu1.17 |
| Ubuntu:14.04:LTS | xen | 0 | 4.4.2-0ubuntu0.14.04.2 |
Related vulnerabilities
- CVE-2024-7730 A heap buffer overflow was found in the virtio-snd device in QEMU. Also affects qemu
- CVE-2024-3447 A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. Also affects qemu
- CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter… Also affects qemu
- CVE-2024-8612 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. Also affects qemu
- CVE-2024-8354 A flaw was found in QEMU. Also affects qemu
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects qemu
- CVE-2024-6505 A flaw was found in the virtio-net device in QEMU. Also affects qemu
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects qemu