PT-2015-6829 · Arista+4 · Arista+4

P J P · Published 2015-09-15 · Updated 2024-06-15 · CVE-2015-5278

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.4.0.1 Arista (affected versions not specified)

Description The issue allows attackers to cause a denial of service or possibly execute arbitrary code via vectors related to receiving packets. This is related to the ne2000 receive function in hw/net/ne2000.c.

Recommendations For QEMU versions prior to 2.4.0.1, update to version 2.4.0.1 or later to resolve the issue. For Arista, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALT-PU-2015-1865

CVE-2015-5278

DSA-3361-1

DSA-3362-1

MGASA-2015-0397

OPENSUSE-SU-2016_0914-1

OPENSUSE-SU-2016_0995-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2015:1782-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1698-1

SUSE-SU-2016:1745-1

SUSE-SU-2016:1785-1

USN-2745-1

Affected Products

Alt Linux

Arista

Qemu

Suse

Ubuntu

References · 388

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• https://bdu.fstec.ru/vul/2017-01031 · Security Note
• https://bdu.fstec.ru/vul/2016-00583 · Security Note
• https://osv.dev/vulnerability/DSA-3361-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1154-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0955-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10394 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1714 · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5278 · Security Note
• https://advisories.mageia.org/MGASA-2015-0397.html · Security Note
• https://ubuntu.com/security/CVE-2015-5279 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5278 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6815 · Security Note
• https://bdu.fstec.ru/vul/2015-10395 · Security Note