Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-7504
HistoryOct 16, 2017 - 8:29 p.m.

CVE-2015-7504

2017-10-1620:29:00
CWE-787
[email protected]
web.nvd.nist.gov
85
2
cve-2015-7504
buffer overflow
pcnet_receive
qemu
denial of service
arbitrary code execution
loopback mode

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON

Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.

Affected configurations

NVD
Node
qemuqemuRange≀2.4.1
OR
qemuqemuMatch2.5.0rc0
OR
qemuqemuMatch2.5.0rc1
OR
qemuqemuMatch2.5.0rc2
Node
xenxen
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
CPENameOperatorVersion
qemu:qemuqemule2.4.1
qemu:qemuqemueq2.5.0

Social References

More

Related

cbl_mariner 1
ubuntucve 1
veracode 2
nvd 1
cvelist 1
prion 1
xen 1
seebug 1
debiancve 1
openvas 24
nessus 27
redhat 3
centos 1
oraclelinux 1
myhack58 1
freebsd 1
fedora 3
ubuntu 1
ibm 1
f5 2
debian 6
osv 3
suse 4
mageia 2
gentoo 2
cbl_mariner
cbl_mariner
CVE-2015-7504 affecting package qemu-kvm 4.2.0-13
2020-11-05 04:21:31
ubuntucve
ubuntucve
CVE-2015-7504
2015-11-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:09:19
Denial Of Service (DoS)
2019-05-02 06:01:52
nvd
nvd
CVE-2015-7504
2017-10-16 20:29:00
cvelist
cvelist
CVE-2015-7504
2017-10-16 20:00:00
prion
prion
Heap overflow
2017-10-16 20:29:00
xen
xen
heap buffer overflow vulnerability in pcnet emulator
2015-11-30 06:00:00
seebug
seebug
QEMU pcnet_receive ε †ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž(CVE-2015-7504)
2015-12-10 00:00:00
debiancve
debiancve
CVE-2015-7504
2017-10-16 20:29:00
openvas
openvas
RedHat Update for qemu-kvm RHSA-2015:2694-01
2015-12-23 00:00:00
Oracle: Security Advisory (ELSA-2015-2694)
2015-12-23 00:00:00
CentOS: Security Advisory for qemu-guest-agent (CESA-2015:2694)
2021-04-21 00:00:00
nessus
nessus
RHEL 6 : qemu-kvm-rhev (RHSA-2015:2696)
2015-12-30 00:00:00
RHEL 6 : qemu-kvm (RHSA-2015:2694)
2015-12-29 00:00:00
CentOS 6 : qemu-kvm (CESA-2015:2694)
2015-12-29 00:00:00
redhat
redhat
(RHSA-2015:2694) Important: qemu-kvm security update
2015-12-22 00:00:00
(RHSA-2015:2696) Important: qemu-kvm-rhev security update
2015-12-22 00:00:00
(RHSA-2015:2695) Important: qemu-kvm-rhev security update
2015-12-22 15:16:25
centos
centos
qemu security update
2015-12-22 17:18:03
oraclelinux
oraclelinux
qemu-kvm security update
2015-12-22 00:00:00
myhack58
myhack58
Travel to the dark of the door! Debugee in QEMU-vulnerability warning-the black bar safety net
2017-08-17 00:00:00
freebsd
freebsd
qemu and xen-tools -- denial of service vulnerabilities in AMD PC-Net II NIC support
2015-11-30 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: qemu-2.4.1-2.fc23
2015-12-17 07:41:33
[SECURITY] Fedora 22 Update: xen-4.5.2-5.fc22
2015-12-20 00:24:12
[SECURITY] Fedora 23 Update: xen-4.5.2-5.fc23
2015-12-17 07:40:46
ubuntu
ubuntu
QEMU vulnerabilities
2015-12-03 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Qemu-kvm affect IBM SmartCloud Entry
2020-07-19 00:49:12
f5
f5
K63519101 : Multiple QEMU vulnerabilities
2016-02-16 00:00:00
SOL63519101 - Multiple QEMU vulnerabilities
2016-02-16 00:00:00
debian
debian
[SECURITY] [DSA 3469-1] qemu security update
2016-02-08 19:45:45
[SECURITY] [DSA 3469-1] qemu security update
2016-02-08 19:45:45
[SECURITY] [DSA 3470-1] qemu-kvm security update
2016-02-08 19:45:53
osv
osv
qemu-kvm - security update
2016-02-08 00:00:00
qemu - security update
2016-02-08 00:00:00
qemu - security update
2016-02-08 00:00:00
suse
suse
Security update for Xen (important)
2016-03-04 22:13:56
Security update for xen (important)
2016-01-14 22:19:10
Security update for xen (important)
2016-01-14 22:16:01
mageia
mageia
Updated qemu packages fix security vulnerabilities
2016-01-17 03:26:26
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
gentoo
gentoo
QEMU: Multiple vulnerabilities
2016-02-04 00:00:00
Xen: Multiple vulnerabilities
2016-04-05 00:00:00

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.2%

JSON
Related for CVE-2015-7504
cbl_mariner1ubuntucve1veracode2nvd1cvelist1prion1xen1seebug1debiancve1openvas24nessus27redhat3centos1oraclelinux1myhack581freebsd1fedora3ubuntu1ibm1f52debian6osv3suse4mageia2gentoo2