CVEvulnerability

CVE-2015-6815

3.5 LOW Published 2020-01-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
2.7 LOW — AV:A/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-835

Description

The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.

Affected configurations

• qemu qemu (< 2.4.0.1) • fedoraproject fedora 21 • fedoraproject fedora 22 • fedoraproject fedora 23 • novell suse linux enterprise software development kit 11.0 • novell suse linux enterprise software development kit 12.0 • novell suse linux enterprise debuginfo 11.0 • novell suse linux enterprise desktop 11.0 • novell suse linux enterprise desktop 12.0 • novell suse linux enterprise server 11.0 • novell suse linux enterprise server 12.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.04 • redhat openstack 5.0 • redhat openstack 6.0 • redhat openstack 7.0 • redhat enterprise linux 5.0 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • xen xen 4.4.3 • xen xen 4.5.1 • arista eos 4.12 • arista eos 4.13 • arista eos 4.14 • arista eos 4.15

Related

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References