CVE-2015-5165

Xen < 4.5.0 - Use of Uninitialized Resource

Title source: rule

Description

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Exploits (1)

github WORKING POC 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/kernel/vm-escape-qemu-case-study/vm_escape/cve-2015-5165.c

View Code ZIP pw:eip

References (19)

[Issue Tracking, Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html

[Issue Tracking, Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html

[Issue Tracking, Mailing List, Third Party Advisory] http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html

[Issue Tracking, Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html

[Issue Tracking, Mailing List, Third Party Advisory] http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1674.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1683.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1739.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1740.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1793.html

[Issue Tracking, Third Party Advisory] http://rhn.redhat.com/errata/RHSA-2015-1833.html

[Broken Link, Third Party Advisory] http://support.citrix.com/article/CTX201717

[Third Party Advisory] http://www.debian.org/security/2015/dsa-3348

[Third Party Advisory] http://www.debian.org/security/2015/dsa-3349

[Third Party Advisory] http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/76153

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1033176

[Patch, Vendor Advisory] http://xenbits.xen.org/xsa/advisory-140.html

[Third Party Advisory] https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13

Scores

EPSS 0.1316

EPSS Percentile 94.2%

Details

CWE

CWE-908

Status published

Products (50)

arista/eos 4.12

arista/eos 4.13

arista/eos 4.14

arista/eos 4.15

debian/debian_linux 7.0

debian/debian_linux 8.0

fedoraproject/fedora 21

fedoraproject/fedora 22

oracle/linux 7 0

redhat/enterprise_linux_compute_node_eus 7.1

... and 40 more

Published Aug 12, 2015

Tracked Since Feb 18, 2026