PRIOn knowledge basePRION:CVE-2015-8567Memory corruption
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
6.7 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.006 Low
EPSS
Percentile
77.6%
Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 15.10 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| fedora | eq | 22 | |
| fedora | eq | 23 | |
| leap | eq | 42.1 | |
| opensuse | eq | 13.2 | |
| qemu | le | 2.5.1.1 | |
| linux_enterprise_debuginfo | eq | 11 sp4 |
References
lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html
lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html
lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html
lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html
lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00017.html
lists.opensuse.org/opensuse-security-announce/2016-06/msg00058.html
lists.opensuse.org/opensuse-security-announce/2016-07/msg00003.html
www.debian.org/security/2016/dsa-3471
www.openwall.com/lists/oss-security/2015/12/15/10
www.securityfocus.com/bid/79721
www.ubuntu.com/usn/USN-2891-1
lists.fedoraproject.org/pipermail/package-announce/2016-February/176503.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/176558.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175967.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/176300.html
lists.gnu.org/archive/html/qemu-devel/2015-12/msg02299.html
security.gentoo.org/glsa/201602-01
Related
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
6.7 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.006 Low
EPSS
Percentile
77.6%