The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Aug 30, 2017 | Aug 12, 2015 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-guest-agent | Dec 1, 2016 | Aug 12, 2015 |
| Debian | — | Upgrade qemuUpgrade qemu-kvmUpgrade xen | Jul 30, 2024 | Aug 12, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 16, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade qemu-develUpgrade xen-toolsUpgrade qemu-sbruno | Dec 10, 2025 | Aug 17, 2015 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-guest-agent | May 17, 2016 | Aug 12, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 3, 2015 |
| Suse | — | Upgrade xen-develUpgrade xen-libsUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-kmp-traceUpgrade xenUpgrade xen-kmp-pae | Dec 18, 2015 | Aug 12, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparc | Nov 8, 2024 | Aug 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub