CVSS 3.1
3.5 lowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCVE-2015-6815
Low (3.5). EPSS 1.0% chance of exploitation in the next 30 days.
The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-835
- Published
- Modified
- Record from
- the NVD, synced
Affected
- arista:eos
- canonical:ubuntu_linux
- fedoraproject:fedora
- novell:suse_linux_enterprise_debuginfo
- novell:suse_linux_enterprise_desktop
- novell:suse_linux_enterprise_server
- novell:suse_linux_enterprise_software_development_kit
- qemu:qemu
- redhat:enterprise_linux
- redhat:openstack
- xen:xen
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html
- http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html