NVD

Id
27950  
Name
CVE-2015-7295  
Description
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-11-09  
Modified Date
2016-11-28  
Seq
2015-7295  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147011 27950 CVE-2015-7295 FEDORA-2015-d8510319c0  View
147012 27950 CVE-2015-7295 FEDORA-2015-fca1900745  View
147013 27950 CVE-2015-7295 FEDORA-2015-d5c1048b47  View
147014 27950 CVE-2015-7295 [oss-security] 20150918 CVE request Qemu: net: virtio-net possible remote DoS  View
147015 27950 CVE-2015-7295 [oss-security] 20150918 Re: CVE request Qemu: net: virtio-net possible remote DoS  View
147016 27950 CVE-2015-7295 82672  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10507 JVNDB-2015-005827 QEMU の Virtual Network Device サポートの hw/virtio/virtio.c におけるサービス運用妨害 (DoS) の脆弱性 QEMU の Virtual Network Device (virtio-net) サポートの hw/virtio/virtio.c には、大きな、またはマージ可能な受信バッファがサポートされていない場合、サービス運用妨害 (ゲストネットワーク資源の消費) 状態にされる脆弱性が存在します。 CVE-2015-7295 84520 CVE-2015-7295 27950 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005827.html 2015-09-18 2015-11-11 View