CVE-2015-3209

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-06-2015 05:59

Last modified: - 11-02-2022 06:40

Total changes: - 3

Description

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Low

Attack complexity

Network

Attack vector

Low

Availability

Low

Confidentiality

Low

Integrity

Privileges required

Scope

User interaction

7.5

Base score

10.0

6.4

Exploitability score

Impact score

Verification logic

vendor=qemu AND product=qemu AND versionEndIncluding=2.3.1

vendor=juniper AND product=junos_space AND versionEndIncluding=15.1

vendor=canonical AND product=ubuntu_linux AND version=12.04 AND software_edition=esm

vendor=canonical AND product=ubuntu_linux AND version=14.04 AND software_edition=esm

vendor=canonical AND product=ubuntu_linux AND version=14.10

vendor=canonical AND product=ubuntu_linux AND version=15.04

vendor=Debian AND product=debian_linux AND version=7.0

vendor=Debian AND product=debian_linux AND version=8.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_desktop AND version=6.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_eus AND version=6.6

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=5.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server AND version=6.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_aus AND version=6.6

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_server_tus AND version=6.6

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=5.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux_workstation AND version=6.0

AND

vendor=Red Hat Enterprise Linux AND product=openstack AND version=5.0

vendor=Red Hat Enterprise Linux AND product=virtualization AND version=3.0

vendor=Red Hat Enterprise Linux AND product=enterprise_linux AND version=6.0

vendor=fedoraproject AND product=fedora AND version=20

vendor=fedoraproject AND product=fedora AND version=21

vendor=fedoraproject AND product=fedora AND version=22

vendor=suse AND product=linux_enterprise_debuginfo AND version=11 AND update=sp2

vendor=suse AND product=linux_enterprise_desktop AND version=11 AND update=sp3

vendor=suse AND product=linux_enterprise_desktop AND version=12 AND update=-

vendor=suse AND product=linux_enterprise_server AND version=10 AND update=sp4 AND software_edition=ltss

vendor=suse AND product=linux_enterprise_server AND version=11 AND update=sp1 AND software_edition=ltss

vendor=suse AND product=linux_enterprise_server AND version=11 AND update=sp2 AND software_edition=ltss

vendor=suse AND product=linux_enterprise_server AND version=11 AND update=sp3 AND target_software=-

vendor=suse AND product=linux_enterprise_server AND version=12 AND update=-

vendor=suse AND product=linux_enterprise_software_development_kit AND version=11 AND update=sp3

vendor=suse AND product=linux_enterprise_software_development_kit AND version=12 AND update=-

vendor=arista AND product=eos AND version=4.12

vendor=arista AND product=eos AND version=4.13

vendor=arista AND product=eos AND version=4.14

vendor=arista AND product=eos AND version=4.15

Reference

http://xenbits.xen.org/xsa/advisory-135.html
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
GLSA-201510-02-Third Party Advisory
75123-Third Party Advisory, VDB Entry
USN-2630-1-Third Party Advisory
SUSE-SU-2015:1643-Mailing List, Third Party Advisory
SUSE-SU-2015:1519-Mailing List, Third Party Advisory
SUSE-SU-2015:1426-Mailing List, Third Party Advisory
SUSE-SU-2015:1152-Mailing List, Third Party Advisory
SUSE-SU-2015:1206-Mailing List, Third Party Advisory
FEDORA-2015-9965-Third Party Advisory
FEDORA-2015-9978-Third Party Advisory
FEDORA-2015-10001-Third Party Advisory
1032545-Third Party Advisory, VDB Entry
DSA-3286-Third Party Advisory
RHSA-2015:1089-Third Party Advisory
RHSA-2015:1088-Third Party Advisory
RHSA-2015:1087-Third Party Advisory
SUSE-SU-2015:1157-Mailing List, Third Party Advisory
SUSE-SU-2015:1156-Mailing List, Third Party Advisory
SUSE-SU-2015:1045-Mailing List, Third Party Advisory
SUSE-SU-2015:1042-Mailing List, Third Party Advisory
https://kb.juniper.net/JSA10783
GLSA-201604-03-Third Party Advisory
DSA-3285-Third Party Advisory
DSA-3284-Third Party Advisory
RHSA-2015:1189-Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13

Keywords

CVE-2015-3209

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2015-3209

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures