PT-2015-1968 · Xen+5 · Xen+5
Donghai Zhu
·
Published
2015-08-11
·
Updated
2023-02-13
·
CVE-2015-5165
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to the version used in Xen 4.6
Xen versions 4.5.x and earlier
Description
The issue is related to the C+ mode offload emulation in the RTL8139 network card device model in QEMU. It allows remote attackers to read process heap memory via unspecified vectors. This could potentially enable an attacker to read data from memory. Additionally, it has been noted that a user on a guest virtual machine could read uninitialized QEMU memory on the switch and potentially run arbitrary code.
Recommendations
For QEMU versions prior to the version used in Xen 4.6: Update to a version used in Xen 4.6 or later to resolve the issue.
For Xen versions 4.5.x and earlier: Upgrade to Xen 4.6 or later to address the vulnerability.
As a temporary workaround, consider restricting access to the RTL8139 network card device model in QEMU until a patch is available.
Fix
Information Disclosure
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Qemu
Red Hat
Suse
Ubuntu
Xen