CVE-2015-5293: Medium severity red hat enterprise virtualization manager vulnerability
It is reported that when a bridge device is set up with "None" for the boot protocol on a network with working IPv6 stateless configuration the host will receieve a valid SLAAC IPv6 address. This could result in a system being reachable via IPv6 when it is not intended to be.
Other sources
Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which might allow remote attackers to communicate with a system designated to be unreachable.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5293?
CVE-2015-5293 has been classified as a moderate severity vulnerability.
How do I fix CVE-2015-5293?
To address CVE-2015-5293, ensure the bridge device is configured correctly and avoid using 'None' for the boot protocol.
What systems are affected by CVE-2015-5293?
CVE-2015-5293 affects Red Hat Enterprise Virtualization Manager versions up to and including 3.6.0.
What is the impact of CVE-2015-5293?
The impact of CVE-2015-5293 is that it may unintentionally expose a system to IPv6 traffic.
When was CVE-2015-5293 reported?
CVE-2015-5293 was reported in 2015.