The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
History
No history.
Information
Published : 2015-08-12 14:59
Updated : 2025-04-12 10:46
NVD link : CVE-2015-5165
Mitre link : CVE-2015-5165
CVE.ORG link : CVE-2015-5165
JSON object : View
Products Affected
xen
- xen
redhat
- enterprise_linux_eus_compute_node
- enterprise_linux_server
- openstack
- enterprise_linux_server_from_rhui
- enterprise_linux_workstation
- enterprise_linux_compute_node_eus
- enterprise_linux_server_eus
- enterprise_linux_for_scientific_computing
- enterprise_linux_server_eus_from_rhui
- enterprise_linux_server_tus
- virtualization
- enterprise_linux_eus
- enterprise_linux_for_power_big_endian
- enterprise_linux_desktop
- enterprise_linux_for_power_big_endian_eus
- enterprise_linux_server_aus
- enterprise_linux_server_update_services_for_sap_solutions
arista
- eos
fedoraproject
- fedora
debian
- debian_linux
oracle
- linux
suse
- linux_enterprise_debuginfo
- linux_enterprise_server
CWE
CWE-908
Use of Uninitialized Resource