NVD

Id
26478  
Name
CVE-2015-5279  
Description
Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-28  
Modified Date
2016-12-23  
Seq
2015-5279  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139996 26478 CVE-2015-5279 http://git.qemu.org/?p=qemu.git;a=commit;h=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755  View
139997 26478 CVE-2015-5279 RHSA-2015:1896  View
139998 26478 CVE-2015-5279 RHSA-2015:1923  View
139999 26478 CVE-2015-5279 RHSA-2015:1924  View
140000 26478 CVE-2015-5279 RHSA-2015:1925  View
140001 26478 CVE-2015-5279 [oss-security] 20150915 CVE-2015-5279 Qemu: net: add checks to validate ring buffer pointers  View
140002 26478 CVE-2015-5279 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140003 26478 CVE-2015-5279 76746  View
140004 26478 CVE-2015-5279 1033569  View
140005 26478 CVE-2015-5279 [Qemu-devel] 20150915 [PULL 2/3] net: add checks to validate ring buffer pointers  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9670 JVNDB-2015-004990 QEMU の hw/net/ne2000.c の ne2000_receive 関数におけるヒープベースのバッファオーバーフローの脆弱性 QEMU の hw/net/ne2000.c の ne2000_receive 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-5279 82504 CVE-2015-5279 26478 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004990.html 2015-09-15 2015-10-01 View