Home > Vulnerability Database > CVE-2015-5165

Mend.io Vulnerability Database

CVE-2015-5165

Good to know:

Date: August 12, 2015

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Language: C

Severity Score

5.3

Related Resources (24)

Url: http://rhn.redhat.com/errata/RHSA-2015-1793.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html

Url: http://rhn.redhat.com/errata/RHSA-2015-1833.html

Url: http://support.citrix.com/article/CTX201717

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html

Url: http://rhn.redhat.com/errata/RHSA-2015-1740.html

Url: http://www.debian.org/security/2015/dsa-3348

Url: http://www.debian.org/security/2015/dsa-3349

Url: https://security-tracker.debian.org/tracker/CVE-2015-5165

Url: http://www.securityfocus.com/bid/76153

Url: https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13

Url: https://access.redhat.com/security/cve/CVE-2015-5165

Url: http://rhn.redhat.com/errata/RHSA-2015-1683.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2015-5165

Url: http://www.securitytracker.com/id/1033176

Url: http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Url: http://xenbits.xen.org/xsa/advisory-140.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html

Url: http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2015-5165

Url: http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html

Url: http://rhn.redhat.com/errata/RHSA-2015-1674.html

Url: http://rhn.redhat.com/errata/RHSA-2015-1739.html

Url: https://www.mend.io/vulnerability-database/CVE-2015-5165

Severity Score

5.3

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Use of Uninitialized Resource

CWE-908

Top Fix

Upgrade Version

Upgrade to version v2.4.0-rc4

Learn More

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2015-5165

Good to know:

Date: August 12, 2015

Language: C

Severity Score

Related Resources (24)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?