What’s Vulnerable › Vulnerabilities
CVE-2015-3209
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 9.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2015-06-15 · updated 2026-06-17
- Weakness: CWE-787
Description
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.
Affected products
- Arista Networks EOS: 4.12, 4.13, 4.14, 4.15
- Canonical Ubuntu Linux: 12.04, 14.04, 14.10, 15.04
- Debian Linux: 7.0, 8.0
- Fedoraproject Fedora: 20, 21, 22
- Juniper Networks Junos Space: through 15.1
- QEMU: through 2.3.1
- RedHat Enterprise Linux Desktop: 6.0
- RedHat Enterprise Linux Eus: 6.6
- RedHat Enterprise Linux Server: 5.0, 6.0
- RedHat Enterprise Linux Server Aus: 6.6
- RedHat Enterprise Linux Server Tus: 6.6
- RedHat Enterprise Linux Workstation: 5.0, 6.0
- OpenStack: 5.0
- RedHat Virtualization: 3.0
- SUSE Linux Enterprise Debuginfo: 11-sp2
- SUSE Linux Enterprise Server 15 SP1: 11-sp3, 12
- SUSE Linux Enterprise Server: 10-sp4, 11-sp1, 11-sp2, 11-sp3, 12
- SUSE Linux Enterprise Software Development Kit: 11-sp3, 12
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html
- http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html
Get alerted when CVE-2015-3209 or the next vulnerability affects your stack