VDB
DEBIAN-CVE-2015-5165
DEBIAN-CVE-2015-5165
PUBLISHED
Record from OSV · Published August 12, 2015
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| qemu | Debian:12 | 1:2.4+dfsg-1a |
| xen | Debian:13 | 4.4.0-1 |
| xen | Debian:14 | 4.4.0-1 |
| qemu | Debian:13 | 1:2.4+dfsg-1a |
| qemu | Debian:14 | 1:2.4+dfsg-1a |
| xen | Debian:12 | 4.4.0-1 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | qemu | 0 |
| Debian:13 | xen | 0 |
| Debian:14 | xen | 0 |
| Debian:13 | qemu | 0 |
| Debian:14 | qemu | 0 |
| Debian:12 | xen | 0 |
Timeline
- Aug 12, 2015 CVE Published
- Sep 9, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln DEBIAN-CVE-2015-5165
vulnetix vdb fixes DEBIAN-CVE-2015-5165Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/DEBIAN-CVE-2015-5165/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart