CVE-2015-6815
Low
Description
The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.
SeverityLow
CVSS3.5
Exploit probability—
Product
Qemu
PublishedJan 31, 2020
First seenJan 31, 2020
How to fix
Update
- qemu qemu2.4.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qemu qemu | v < 2.4.0.1 | 2.4.0.1 |
| fedoraproject fedora | 21, 22, 23 | — |
| novell suse_linux_enterprise_software_development_kit | 11.0, 12.0 | — |
| novell suse_linux_enterprise_debuginfo | 11.0 | — |
| novell suse_linux_enterprise_desktop | 11.0, 12.0 | — |
| novell suse_linux_enterprise_server | 11.0, 12.0 | — |
| canonical ubuntu_linux | 12.04, 14.04, 15.04 | — |
| redhat openstack | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux | 5.0, 6.0, 7.0 | — |
| xen xen | 4.4.3, 4.5.1 | — |
| arista eos | 4.12, 4.13, 4.14, 4.15 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.