CVE-2015-7512

Опубликовано: 08 янв. 2016

Источник: nvd

CVSS3: 9

CVSS2: 6.8

EPSS Средний

Описание

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8b98a2f07175d46c3f7217639bd5e03f
http://rhn.redhat.com/errata/RHSA-2015-2694.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2695.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2696.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3469
Third Party Advisory
http://www.debian.org/security/2016/dsa-3470
Third Party Advisory
http://www.debian.org/security/2016/dsa-3471
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/30/3
Mailing List
Third Party Advisory
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
Third Party Advisory
http://www.securityfocus.com/bid/78230
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1034527
Third Party Advisory
VDB Entry
https://security.gentoo.org/glsa/201602-01
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=8b98a2f07175d46c3f7217639bd5e03f
http://rhn.redhat.com/errata/RHSA-2015-2694.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2695.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-2696.html
Third Party Advisory
http://www.debian.org/security/2016/dsa-3469
Third Party Advisory
http://www.debian.org/security/2016/dsa-3470
Third Party Advisory
http://www.debian.org/security/2016/dsa-3471
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/11/30/3
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.4.1 (включая)

cpe:2.3:a:qemu:qemu:2.5.0:rc0:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.5.0:rc1:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.5.0:rc2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:6.7:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.2106

Средний

9 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2015-7512

CVSS3: 9

ubuntu

больше 9 лет назад

CVE-2015-7512

redhat

больше 9 лет назад

CVE-2015-7512

CVSS3: 9

debian

больше 9 лет назад

Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEM ...

GHSA-4583-4mx5-3jcc

CVSS3: 9

github

около 3 лет назад

openSUSE-SU-2016:0536-1

suse-cvrf

больше 9 лет назад

Security update for qemu

EPSS

Процентиль: 95%

0.2106

Средний

9 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120