← volver
CVE-2015-5279

CVE-2015-5279

EPSS 1.0%
Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1896.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1923.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1924.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1925.htmlhttps://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.htmlhttps://security.gentoo.org/glsa/201602-01https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14