Bugzilla – Bug 945987
VUL-0: CVE-2015-5279: qemu,kvm: Heap overflow vulnerability in ne2000_receive() function
Last modified: 2016-07-21 15:47:46 UTC
rh#1256672 Qemu emulator built with the NE2000 NIC emulation support is vulnerable to a heap buffer overflow issue. It could occur when receiving packets over the network. A privileged user inside guest could use this flaw to crash the Qemu instance or potentially execute arbitrary code on the host. Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html Reference: ---------- References: http://www.openwall.com/lists/oss-security/2015/09/15/3 https://bugzilla.redhat.com/show_bug.cgi?id=1256672 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5279 http://seclists.org/oss-sec/2015/q3/549 http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-5279.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5279 https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html
bugbot adjusting priority
This is fixed by QEMU upstream commit 9bbdbc66e5765068dce76e9269dce4547afd8ad4.
SUSE-SU-2015:1782-1: An update that solves 5 vulnerabilities and has 10 fixes is now available. Category: security (important) Bug References: 902737,928308,934506,934517,936537,937125,937572,938344,939216,943446,944017,945404,945778,945987,945989 CVE References: CVE-2014-7815,CVE-2015-5154,CVE-2015-5278,CVE-2015-5279,CVE-2015-6855 Sources used: SUSE Linux Enterprise Server 12 (src): qemu-2.0.2-48.9.1 SUSE Linux Enterprise Desktop 12 (src): qemu-2.0.2-48.9.1
SUSE-SU-2016:1698-1: An update that solves 33 vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 895528,901508,928393,934069,936132,940929,944463,945404,945987,945989,947159,958491,958917,959005,960334,960725,961332,961333,961358,961556,961691,962320,963782,964413,967969,969350,970036,970037,975128,975136,975700,976109,978158,978160,980711,980723 CVE References: CVE-2014-3615,CVE-2014-3689,CVE-2014-9718,CVE-2015-3214,CVE-2015-5239,CVE-2015-5278,CVE-2015-5279,CVE-2015-5745,CVE-2015-6855,CVE-2015-7295,CVE-2015-7549,CVE-2015-8504,CVE-2015-8558,CVE-2015-8613,CVE-2015-8619,CVE-2015-8743,CVE-2016-1568,CVE-2016-1714,CVE-2016-1922,CVE-2016-1981,CVE-2016-2198,CVE-2016-2538,CVE-2016-2841,CVE-2016-2857,CVE-2016-2858,CVE-2016-3710,CVE-2016-3712,CVE-2016-4001,CVE-2016-4002,CVE-2016-4020,CVE-2016-4037,CVE-2016-4439,CVE-2016-4441 Sources used: SUSE Linux Enterprise Server 11-SP3-LTSS (src): kvm-1.4.2-46.1
SUSE-SU-2016:1785-1: An update that solves 33 vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 895528,901508,928393,934069,936132,940929,944463,945404,945987,945989,947159,958491,958917,959005,960334,960725,961332,961333,961358,961556,961691,962320,963782,964413,967969,969350,970036,970037,975128,975136,975700,976109,978158,978160,980711,980723 CVE References: CVE-2014-3615,CVE-2014-3689,CVE-2014-9718,CVE-2015-3214,CVE-2015-5239,CVE-2015-5278,CVE-2015-5279,CVE-2015-5745,CVE-2015-6855,CVE-2015-7295,CVE-2015-7549,CVE-2015-8504,CVE-2015-8558,CVE-2015-8613,CVE-2015-8619,CVE-2015-8743,CVE-2016-1568,CVE-2016-1714,CVE-2016-1922,CVE-2016-1981,CVE-2016-2198,CVE-2016-2538,CVE-2016-2841,CVE-2016-2857,CVE-2016-2858,CVE-2016-3710,CVE-2016-3712,CVE-2016-4001,CVE-2016-4002,CVE-2016-4020,CVE-2016-4037,CVE-2016-4439,CVE-2016-4441 Sources used: SUSE Linux Enterprise Server 11-SP4 (src): kvm-1.4.2-44.1
fixed everywhere