NetSight
IP …
critical9.3

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap …

Impact

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Affected products

VendorProductAffected versions
XenXen
through 4.5.0
Version 4.5.1
FedoraprojectFedora
Versions 21, 22
SuseLinux Enterprise Debuginfo
Version 11
SuseLinux Enterprise Server
Versions 10, 11
DebianDebian Linux
Versions 7.0, 8.0
RedhatOpenstack
Versions 5.0, 6.0
RedhatVirtualization
Version 3.0
RedhatEnterprise Linux Compute Node Eus
Versions 7.1, 7.2, 7.3, 7.4, 7.5, 7.6
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Eus
Version 6.7
RedhatEnterprise Linux Eus Compute Node
Version 6.7
RedhatEnterprise Linux For Power Big Endian
Versions 6.0, 7.0

Weakness classification

CWE-908

References