Unscored severity · published Aug 12, 2015
CVE-2015-5165
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via…
–
CVSS
13.3%
EPSS
No
On KEV
Description
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
7.0; 8.0 · source: NVD
EL
Enterprise Linux Compute Node Eus · Redhat
7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0 · source: NVD
EL
Enterprise Linux Eus · Redhat
6.7 · source: NVD
EL
Enterprise Linux Eus Compute Node · Redhat
6.7 · source: NVD
EL
Enterprise Linux For Power Big Endian · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux For Power Big Endian Eus · Redhat
6.7_ppc64; 7.1_ppc64; 7.2_ppc64; 7.3_ppc64; 7.4_ppc64; 7.5_ppc64; +2 more · source: NVD
EL
Enterprise Linux For Scientific Computing · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0; 7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.3; 7.4; 7.6; 7.7 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more · source: NVD
EL
Enterprise Linux Server Eus From Rhui · Redhat
6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5165
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5165
Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html
Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html
Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html
Issue Tracking
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html
Issue Tracking
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html
Issue Tracking
http://rhn.redhat.com/errata/RHSA-2015-1674.html
More from Eos
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
5.8
CVE-2026-7473
Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
9.8
CVE-2021-28503
The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to…
9.8
CVE-2020-10188
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the…