{"id":"CVE-2015-5165","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-5165","generatedAt":"2026-10-27T18:55:40.847Z","title":"The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.","description":"The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.","published":"2015-08-12T14:59:24.000Z","lastModified":"2026-06-17T00:28:36.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-908"],"affected":["xen/xen","fedoraproject/fedora","suse/linux enterprise debuginfo","suse/linux enterprise server","debian/debian linux","redhat/openstack","redhat/virtualization","redhat/enterprise linux compute node eus","redhat/enterprise linux desktop","redhat/enterprise linux eus","redhat/enterprise linux eus compute node","redhat/enterprise linux for power big endian","redhat/enterprise linux for power big endian eus","redhat/enterprise linux for scientific computing","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server eus from rhui","redhat/enterprise linux server from rhui","redhat/enterprise linux server tus","redhat/enterprise linux server update services for sap solutions","redhat/enterprise linux workstation","arista/eos","oracle/linux"],"epss":{"score":0.13288,"percentile":0.96363,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 13.3%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1674.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1683.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1739.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1740.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1793.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1833.html","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://support.citrix.com/article/CTX201717","tags":["Broken Link","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3348","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2015/dsa-3349","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/76153","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id/1033176","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://xenbits.xen.org/xsa/advisory-140.html","tags":["Patch","Vendor Advisory"],"source":"secalert@redhat.com"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165373.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167792.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167820.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1674.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1683.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1739.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1740.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1793.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1833.html","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/article/CTX201717","tags":["Broken Link","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3348","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3349","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76153","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033176","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-140.html","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-5165","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}