CVE-2015-3215

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2017-06-26

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Virtio-win (Redhat)

References

• http://rhn.redhat.com/errata/RHSA-2015-1043.html
• http://rhn.redhat.com/errata/RHSA-2015-1044.html
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238
• https://www.redhat.com/security/data/cve/CVE-2015-3215.html