CVE-2015-5165
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
- EPSS
- 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-908
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arista:eos
- debian:debian_linux
- fedoraproject:fedora
- oracle:linux
- redhat:enterprise_linux_compute_node_eus
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_eus_compute_node
- redhat:enterprise_linux_for_power_big_endian
- redhat:enterprise_linux_for_power_big_endian_eus
- redhat:enterprise_linux_for_scientific_computing
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_eus
- redhat:enterprise_linux_server_eus_from_rhui
- redhat:enterprise_linux_server_from_rhui
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_server_update_services_for_sap_solutions
- redhat:enterprise_linux_workstation
- redhat:openstack
- redhat:virtualization
- suse:linux_enterprise_debuginfo
- suse:linux_enterprise_server
- xen:xen
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html