VULNERABILITY INTELLIGENCE

CVE-2015-5165

CVSS score9.3 HIGH
EPSS probability13.29%
CISA KEVNot currently listed
Published2015-08-12
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.

Weakness classification

  • CWE-908: Use of Uninitialized Resource

Primary references