CVE-2015-5165

Published: Aug 12, 2015Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Affected (65)

Products: Xen: Xen · Fedoraproject: Fedora · Suse: Linux Enterprise Debuginfo, Linux Enterprise Server · +4 more

Show all products

1 product

1 product

2 products

Linux Enterprise Debuginfo

Linux Enterprise Server

Debian

1 product

Debian Linux

Redhat

17 products

Enterprise Linux Compute Node Eus

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Eus Compute Node

Enterprise Linux For Power Big Endian

Enterprise Linux For Power Big Endian Eus

Enterprise Linux For Scientific Computing

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Eus From Rhui

Enterprise Linux Server From Rhui

Enterprise Linux Server Tus

Enterprise Linux Server Update Services For Sap Solutions

Enterprise Linux Workstation

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.5.0
Xen Xen	Version 4.5.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 21
Fedoraproject Fedora	Version 22

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Debuginfo	Version 11 sp1
Suse Linux Enterprise Server	Version 10 sp4
Suse Linux Enterprise Server	Version 11 sp1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration E

51 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Compute Node Eus	Version 7.1
Redhat Enterprise Linux Compute Node Eus	Version 7.2
Redhat Enterprise Linux Compute Node Eus	Version 7.3
Redhat Enterprise Linux Compute Node Eus	Version 7.4
Redhat Enterprise Linux Compute Node Eus	Version 7.5
Redhat Enterprise Linux Compute Node Eus	Version 7.6
Redhat Enterprise Linux Compute Node Eus	Version 7.7
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Eus	Version 6.7
Redhat Enterprise Linux Eus Compute Node	Version 6.7
Redhat Enterprise Linux For Power Big Endian	Version 6.0
Redhat Enterprise Linux For Power Big Endian	Version 7.0
Redhat Enterprise Linux For Power Big Endian Eus	Version 6.7_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.1_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.2_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.3_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.4_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.5_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.6_ppc64
Redhat Enterprise Linux For Power Big Endian Eus	Version 7.7_ppc64
Redhat Enterprise Linux For Scientific Computing	Version 6.0
Redhat Enterprise Linux For Scientific Computing	Version 7.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Eus	Version 7.1
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.3
Redhat Enterprise Linux Server Eus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 7.5
Redhat Enterprise Linux Server Eus	Version 7.6
Redhat Enterprise Linux Server Eus	Version 7.7
Redhat Enterprise Linux Server Eus From Rhui	Version 6.7
Redhat Enterprise Linux Server From Rhui	Version 6.0
Redhat Enterprise Linux Server From Rhui	Version 7.0
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.2
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.3
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.4
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.6
Redhat Enterprise Linux Server Update Services For Sap Solutions	Version 7.7
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Openstack	Version 5.0
Redhat Openstack	Version 6.0
Redhat Virtualization	Version 3.0

Configuration F

4 vulnerable

Vulnerable Software	Affected Versions
Arista Eos	Version 4.12
Arista Eos	Version 4.13
Arista Eos	Version 4.14
Arista Eos	Version 4.15

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 7 0

Related CWEs

CWE-908

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

References (38)

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html

Source: secalert@redhat.com

Issue TrackingMailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1674.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1683.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1739.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1740.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1793.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1833.html

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://support.citrix.com/article/CTX201717

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.debian.org/security/2015/dsa-3348

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2015/dsa-3349

Source: secalert@redhat.com

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/76153

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1033176

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://xenbits.xen.org/xsa/advisory-140.html

Source: secalert@redhat.com

PatchVendor Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html