qemu: Heap overflow vulnerability in ne2000_receive() function
Published Sep 28, 2015
7.2
HIGHCVSS 2.0
EPSS 1.05%
Description
Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
Affected products
No data.
No data.
RHEV 3.X Hypervisor and Agents for RHEL-6
qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2
Fixed · RHSA-2015:1923
Red Hat Enterprise Linux 5
kvm-0:83-274.el5_11
Fixed · RHSA-2015:1925
Red Hat Enterprise Linux 5
xen-0:3.0.3-147.el5_11
Fixed · RHSA-2015:2065
Red Hat Enterprise Linux 6
qemu-kvm-2:0.12.1.2-2.479.el6_7.2
Fixed · RHSA-2015:1924
Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6
qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2
Fixed · RHSA-2015:1896
Red Hat Enterprise Linux 5
kvm
Affected
Red Hat Enterprise Linux 7
qemu-kvm
Not affected
Red Hat Enterprise Linux 7
qemu-kvm-rhev
Not affected
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)
qemu-kvm-rhev
Not affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)
qemu-kvm-rhev
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| RHEV 3.X Hypervisor and Agents for RHEL-6 | qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2 | Fixed | RHSA-2015:1923 |
| Red Hat Enterprise Linux 5 | kvm-0:83-274.el5_11 | Fixed | RHSA-2015:1925 |
| Red Hat Enterprise Linux 5 | xen-0:3.0.3-147.el5_11 | Fixed | RHSA-2015:2065 |
| Red Hat Enterprise Linux 6 | qemu-kvm-2:0.12.1.2-2.479.el6_7.2 | Fixed | RHSA-2015:1924 |
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 | qemu-kvm-rhev-2:0.12.1.2-2.479.el6_7.2 | Fixed | RHSA-2015:1896 |
| Red Hat Enterprise Linux 5 | kvm | Affected | n/a |
| Red Hat Enterprise Linux 7 | qemu-kvm | Not affected | n/a |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | Not affected | n/a |
| Red Hat Enterprise Linux OpenStack Platform 6 (Juno) | qemu-kvm-rhev | Not affected | n/a |
| Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) | qemu-kvm-rhev | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue affects the versions of kvm and xen packages as shipped with Red Hat Enterprise Linux 5. This issue affects the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 6. This issue affects the Red Hat Enterprise Linux 6 based versions of qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3. This issue does not affect the versions of the qemu-kvm packages as shipped with Red Hat Enterprise Linux 7. This issue does not affect the Red Hat Enterprise Linux 7 based versions of the qemu-kvm-rhev packages as shipped with Red Hat Enterprise Virtualization 3.
References (23)
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755 x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html vendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html vendor-advisoryx_refsource_FEDORA
- http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html vendor-advisoryx_refsource_SUSE
- http://rhn.redhat.com/errata/RHSA-2015-1896.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2015-1923.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2015-1924.html vendor-advisoryx_refsource_REDHAT
- http://rhn.redhat.com/errata/RHSA-2015-1925.html vendor-advisoryx_refsource_REDHAT
- http://www.debian.org/security/2015/dsa-3361 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2015/dsa-3362 vendor-advisoryx_refsource_DEBIAN
- http://www.openwall.com/lists/oss-security/2015/09/15/3 mailing-listx_refsource_MLIST
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html x_refsource_CONFIRM
- http://www.securityfocus.com/bid/76746 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id/1033569 vdb-entryx_refsource_SECTRACK
- https://access.redhat.com/security/cve/CVE-2015-5279 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1256672 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-5258 Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html mailing-listx_refsource_MLIST
- https://nvd.nist.gov/vuln/detail/CVE-2015-5279
- https://security.gentoo.org/glsa/201602-01 vendor-advisoryx_refsource_GENTOO
- https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14 x_refsource_MISC
- https://www.cve.org/CVERecord?id=CVE-2015-5279
Change history (0)
No recorded changes yet.