Back to search
CVE-2015-5279
Published: Sep 28, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-3361
vendor-advisory
x_refsource_DEBIAN
FEDORA-2015-16369
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-16370
vendor-advisory
x_refsource_FEDORA
[oss-security] 20150915 CVE-2015-5279 Qemu: net: add checks to validate ring buffer pointers
mailing-list
x_refsource_MLIST
[Qemu-devel] 20150915 [PULL 2/3] net: add checks to validate ring buffer pointers
mailing-list
x_refsource_MLIST
RHSA-2015:1896
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2015:1782
vendor-advisory
x_refsource_SUSE
FEDORA-2015-16368
vendor-advisory
x_refsource_FEDORA
RHSA-2015:1924
vendor-advisory
x_refsource_REDHAT
76746
vdb-entry
x_refsource_BID
DSA-3362
vendor-advisory
x_refsource_DEBIAN
1033569
vdb-entry
x_refsource_SECTRACK
RHSA-2015:1923
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1925
vendor-advisory
x_refsource_REDHAT
GLSA-201602-01
vendor-advisory
x_refsource_GENTOO
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now