CVE-2015-8567: qemu qemu – CVSS 7.7 · Watchpost

← All vulnerabilities

CVE-2015-8567

高危 7.7CVE-2015-8567 · Published 13/04/2017 · updated 17/06/2026

要点

CVE-2015-8567 是影响 qemu (qemu), linux enterprise debuginfo (suse) 的高危 (CVSS 7.7)漏洞。
未来 30 天内被利用的概率（EPSS）：5.6%，高于 92.9% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
qemu qemu	`≤ 2.5.1.1`	No fix yet
linux enterprise debuginfo suse	`= 11`	No fix yet

Description

Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).

References

lists.fedoraproject.org/pipermail/package-announce/2016-February/176503.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-February/176558.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-January/175967.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2016-January/176300.html · Third Party Advisory
lists.opensuse.org/opensuse-security-announce/2016-01/msg00010.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-01/msg00012.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-03/msg00087.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-04/msg00002.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2016-05/msg00049.html

qemu 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free