CVE-2015-5165: Critical severity xen xapi vulnerability
Published Aug 12, 2015
·Updated
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
Affected Software
65 affected components
XEN Xen<=4.5.0
XEN Xen=4.5.1
Fedoraproject Fedora=21
Fedoraproject Fedora=22
SUSE Linux Enterprise Debuginfo=11-sp1
SUSE Linux Enterprise Server=10-sp4
SUSE Linux Enterprise Server=11-sp1
Debian Debian Linux=7.0
Debian Debian Linux=8.0
redhat Openstack=5.0
redhat Openstack=6.0
redhat Virtualization=3.0
redhat Enterprise Linux Compute Node Eus=7.1
redhat Enterprise Linux Compute Node Eus=7.2
redhat Enterprise Linux Compute Node Eus=7.3
redhat Enterprise Linux Compute Node Eus=7.4
redhat Enterprise Linux Compute Node Eus=7.5
redhat Enterprise Linux Compute Node Eus=7.6
redhat Enterprise Linux Compute Node Eus=7.7
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Eus=6.7
redhat Enterprise Linux Eus Compute Node=6.7
redhat Enterprise Linux For Power Big Endian=6.0
redhat Enterprise Linux For Power Big Endian=7.0
redhat Enterprise Linux For Power Big Endian Eus=6.7_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.1_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.2_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.3_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.4_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.5_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.6_ppc64
redhat Enterprise Linux For Power Big Endian Eus=7.7_ppc64
redhat Enterprise Linux For Scientific Computing=6.0
redhat Enterprise Linux For Scientific Computing=7.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Server=7.0
redhat Enterprise Linux Server Aus=7.3
redhat Enterprise Linux Server Aus=7.4
redhat Enterprise Linux Server Aus=7.6
redhat Enterprise Linux Server Aus=7.7
redhat Enterprise Linux Server Eus=7.1
redhat Enterprise Linux Server Eus=7.2
redhat Enterprise Linux Server Eus=7.3
redhat Enterprise Linux Server Eus=7.4
redhat Enterprise Linux Server Eus=7.5
redhat Enterprise Linux Server Eus=7.6
redhat Enterprise Linux Server Eus=7.7
redhat Enterprise Linux Server Eus From Rhui=6.7
redhat Enterprise Linux Server From Rhui=6.0
redhat Enterprise Linux Server From Rhui=7.0
redhat Enterprise Linux Server Tus=7.3
redhat Enterprise Linux Server Tus=7.6
redhat Enterprise Linux Server Tus=7.7
redhat Enterprise Linux Server Update Services For Sap Solutions=7.2
redhat Enterprise Linux Server Update Services For Sap Solutions=7.3
redhat Enterprise Linux Server Update Services For Sap Solutions=7.4
redhat Enterprise Linux Server Update Services For Sap Solutions=7.6
redhat Enterprise Linux Server Update Services For Sap Solutions=7.7
redhat Enterprise Linux Workstation=6.0
redhat Enterprise Linux Workstation=7.0
Arista EOS=4.12
Arista EOS=4.13
Arista EOS=4.14
Arista EOS=4.15
Oracle Linux=7-0
Remediation
Patch Available
Event History
Aug 12, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5165?
CVE-2015-5165 has a high severity rating due to its potential to allow remote attackers to read sensitive process heap memory.
2
How do I fix CVE-2015-5165?
To fix CVE-2015-5165, you should update to the latest version of the affected software that includes the security patch.
3
Which software is affected by CVE-2015-5165?
CVE-2015-5165 affects certain versions of Xen, Fedora, SUSE Linux, Debian, and various Red Hat products.
4
Can CVE-2015-5165 be exploited remotely?
Yes, CVE-2015-5165 can be exploited remotely by attackers, posing a significant risk to vulnerable systems.
5
What are the potential effects of CVE-2015-5165?
The potential effects of CVE-2015-5165 include unauthorized access to sensitive information and process memory leakage.