PT-2017-6647 · Netkvm+1 · Netkvm Windows Virtio Driver+1

Published 2015-06-03 · Updated 2023-02-13 · CVE-2015-3215

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetKVM Windows Virtio driver (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a guest crash. This can be achieved by sending a crafted IP packet with a length value that does not account for the size of the IP options.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-3215

RHSA-2015:1043

RHSA-2015:1044

RHSA-2015_1043

RHSA-2015_1044

Affected Products

Netkvm Windows Virtio Driver

Red Hat

References · 9

• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1 · Patch
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-3215 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1044.html · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2015-3215.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1043.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2015-3215 · Note
• https://access.redhat.com/errata/RHSA-2015:1043 · Note
• https://access.redhat.com/errata/RHSA-2015:1044 · Note