PT-2015-1968 · Xen+5 · Xen+5
Donghai Zhu
·
Publicado
2015-08-11
·
Atualizado
2023-02-13
·
CVE-2015-5165
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to the version used in Xen 4.6
Xen versions 4.5.x and earlier
Description
The issue is related to the C+ mode offload emulation in the RTL8139 network card device model in QEMU. It allows remote attackers to read process heap memory via unspecified vectors. This could potentially enable an attacker to read data from memory. Additionally, it has been noted that a user on a guest virtual machine could read uninitialized QEMU memory on the switch and potentially run arbitrary code.
Recommendations
For QEMU versions prior to the version used in Xen 4.6: Update to a version used in Xen 4.6 or later to resolve the issue.
For Xen versions 4.5.x and earlier: Upgrade to Xen 4.6 or later to address the vulnerability.
As a temporary workaround, consider restricting access to the RTL8139 network card device model in QEMU until a patch is available.
Correção
Information Disclosure
Use of Uninitialized Resource
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Qemu
Red Hat
Suse
Ubuntu
Xen