CVE-2015-7295: Buffer Overflow
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7295?
CVE-2015-7295 has been classified as a denial of service vulnerability which can potentially disrupt guest network operations.
How do I fix CVE-2015-7295?
To fix CVE-2015-7295, update QEMU to a version later than 2.4.1 where the vulnerability is patched.
What types of interfaces are affected by CVE-2015-7295?
CVE-2015-7295 affects the tuntap and macvtap interfaces in the QEMU environment.
What can an attacker achieve by exploiting CVE-2015-7295?
By exploiting CVE-2015-7295, an attacker can cause denial of service by flooding the network with jumbo frames.
Which versions of Fedora are affected by CVE-2015-7295?
CVE-2015-7295 affects Fedora versions 21 and 22 due to vulnerabilities in the virtio-net support.