Low severity3.5NVD Advisory· Published Jan 31, 2020· Updated Jun 17, 2026

CVE-2015-6815

Description

The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords23 versions
pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP2-LTSS pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweed pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/kvm&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP3 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012
< 4.4.3_02-26.2+ 22 more
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.1.6_08-20.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 2.0.2-48.22.1
- (no CPE)range: < 4.7.0_12-1.3
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 4.5.2_02-4.1
- (no CPE)range: < 2.0.2-48.22.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 4.4.3_02-26.2
- (no CPE)range: < 1.4.2-47.1
- (no CPE)range: < 1.4.2-47.1
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.2.5_14-18.2
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.4.3_02-22.12.1
- (no CPE)range: < 4.4.3_02-22.12.1
QEMU/Qemuv53 versions
before 2.4.0.1+ 2 more
- (no CPE)range: before 2.4.0.1
- cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*range: <2.4.0.1
- (no CPE)range: <2.4.0.1
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Software Development Kit3 versions
cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp4:*:*:*:*:*:*
- cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Debuginfo2 versions
cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp3:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_debuginfo:11.0:sp4:*:*:*:*:*:*
Novell/Suse Linux Enterprise Desktop3 versions
cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp4:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:12.0:*:*:*:*:*:*:*
Novell/Suse Linux Enterprise Server3 versions
cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp4:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:12.0:*:*:*:*:*:*:*
Canonical/Ubuntu Linux3 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
Red Hat/Openstack3 versions
cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server3 versions
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
Xen/Xen2 versions
cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:xen:xen:4.4.3:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:*
Arista/Eos4 versions
cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*
- cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:*
- cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:*
- cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.htmlnvdMailing ListPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.htmlnvdMailing ListPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.htmlnvdMailing ListPatchThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
lists.gnu.org/archive/html/qemu-devel/2015-09/msg01199.htmlnvdMailing ListPatchThird Party Advisory
lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.htmlnvdMailing ListPatchThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.htmlnvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2015/09/04/4nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2015/09/05/5nvdMailing ListThird Party Advisory
www.ubuntu.com/usn/USN-2745-1nvdThird Party Advisory
www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000