Published: 23/01/2020 Updated: 30/11/2021

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The ne2000_receive function in hw/net/ne2000.c in QEMU prior to 2.4.0.1 allows malicious users to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
fedoraproject fedora 21
fedoraproject fedora 22
fedoraproject fedora 23
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
canonical ubuntu linux 15.04
arista eos 4.12
arista eos 4.13
arista eos 4.14
arista eos 4.15

Several security issues were fixed in QEMU ...

Debian Bug report logs - #799073 qemu: CVE-2015-5278: Infinite loop in ne2000_receive() function Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 15 Sep 2015 16:03:02 UTC Severity: important Tags: ...

Debian Bug report logs - #799074 qemu: CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() function Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 15 Sep 2015 16:09:02 UTC Severity: im ...

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware CVE-2015-5278 Qinghao Tang of QIHU 360 Inc discovered an infinite loop issue in the NE2000 NIC emulation A privileged guest user could use this flaw to mount a denial of service (QEMU process crash) CVE-2015-5279 Qinghao Tang of ...

Several vulnerabilities were discovered in qemu, a fast processor emulator CVE-2015-5278 Qinghao Tang of QIHU 360 Inc discovered an infinite loop issue in the NE2000 NIC emulation A privileged guest user could use this flaw to mount a denial of service (QEMU process crash) CVE-2015-5279 Qinghao Tang of QIHU 360 Inc discovered ...

CWE-835 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03985.html http://www.openwall.com/lists/oss-security/2015/09/15/2 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html http://www.ubuntu.com/usn/USN-2745-1 https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14 https://usn.ubuntu.com/2745-1/https://nvd.nist.gov

CVE-2015-5278

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect