http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html

http://rhn.redhat.com/errata/RHSA-2015-1087.html

http://rhn.redhat.com/errata/RHSA-2015-1088.html

http://rhn.redhat.com/errata/RHSA-2015-1089.html

http://rhn.redhat.com/errata/RHSA-2015-1189.html

http://www.debian.org/security/2015/dsa-3284

http://www.debian.org/security/2015/dsa-3285

http://www.debian.org/security/2015/dsa-3286

http://www.securityfocus.com/bid/75123

http://www.securitytracker.com/id/1032545

http://www.ubuntu.com/usn/USN-2630-1

http://xenbits.xen.org/xsa/advisory-135.html

https://kb.juniper.net/JSA10783

https://security.gentoo.org/glsa/201510-02

https://security.gentoo.org/glsa/201604-03

https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

Red Hat, Inc. (AV:A/AC:H/Au:S/C:C/I:C/A:C)

https://access.redhat.com/errata/RHSA-2015:1087 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1088 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1089 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1189 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2015-3209 [No Types Assigned]

https://bugzilla.redhat.com/show_bug.cgi?id=1225882 [No Types Assigned]

Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process.

Red Hat, Inc. (AV:A/AC:H/Au:S/C:C/I:C/A:C)

https://access.redhat.com/errata/RHSA-2015:1087 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1088 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1089 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2015:1189 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2015-3209 [No Types Assigned]

https://bugzilla.redhat.com/show_bug.cgi?id=1225882 [No Types Assigned]

OR
     *cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:*
     *cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:*
     *cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:*
     *cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:*

https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 No Types Assigned

https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13 [No Types Assigned]

NIST CWE-787

NIST CWE-119

OR
     *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* versions up to (including) 2.3.1

OR
     *cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:* versions up to (including) 4.5.0

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

AND
     OR
          *cpe:2.3:a:redhat:openstack:5.0:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*
     OR
          cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp2:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:ltss:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
     *cpe:2.3:o:suse:linux_enterprise

OR
     *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:6.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterpri

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 No Types Assigned

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html Mailing List, Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1087.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-1087.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1088.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-1088.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1089.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-1089.html Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1189.html No Types Assigned

http://rhn.redhat.com/errata/RHSA-2015-1189.html Third Party Advisory

http://www.debian.org/security/2015/dsa-3284 No Types Assigned

http://www.debian.org/security/2015/dsa-3284 Third Party Advisory

http://www.debian.org/security/2015/dsa-3285 No Types Assigned

http://www.debian.org/security/2015/dsa-3285 Third Party Advisory

http://www.debian.org/security/2015/dsa-3286 No Types Assigned

http://www.debian.org/security/2015/dsa-3286 Third Party Advisory

http://www.securityfocus.com/bid/75123 No Types Assigned

http://www.securityfocus.com/bid/75123 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1032545 No Types Assigned

http://www.securitytracker.com/id/1032545 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2630-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2630-1 Third Party Advisory

http://xenbits.xen.org/xsa/advisory-135.html Vendor Advisory

http://xenbits.xen.org/xsa/advisory-135.html Third Party Advisory

https://kb.juniper.net/JSA10783 No Types Assigned

https://kb.juniper.net/JSA10783 Third Party Advisory

https://security.gentoo.org/glsa/201510-02 No Types Assigned

https://security.gentoo.org/glsa/201510-02 Third Party Advisory

https://security.gentoo.org/glsa/201604-03 No Types Assigned

https://security.gentoo.org/glsa/201604-03 Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-1189.html [No Types Assigned]

http://www.debian.org/security/2015/dsa-3284 [No Types Assigned]

http://www.debian.org/security/2015/dsa-3285 [No Types Assigned]

https://security.gentoo.org/glsa/201604-03 [No Types Assigned]

https://kb.juniper.net/JSA10783 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1087.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1088.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1089.html [No Types Assigned]

http://www.debian.org/security/2015/dsa-3286 [No Types Assigned]

http://www.securitytracker.com/id/1032545 [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160669.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160677.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00014.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html [No Types Assigned]

http://www.ubuntu.com/usn/USN-2630-1 [No Types Assigned]

http://www.securityfocus.com/bid/75123 [No Types Assigned]

Configuration 1
     OR
          *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:a:juniper:junos_space:15.1:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:a:juniper:junos_space:15.1:*:*:*:*:*:*:* (and previous)
Configuration 3
     OR
          *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* (and previous)

https://security.gentoo.org/glsa/201510-02

Configuration 1
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* (and previous)

Configuration 1
     OR
          *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
Configuration 3
     OR
          *cpe:2.3:a:juniper:junos_space:15.1:*:*:*:*:*:*:* (and previous)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

CWE-119

Configuration 1
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*
Configuration 2
     OR
          *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* (and previous)

http://xenbits.xen.org/xsa/advisory-135.html No Types Assigned

http://xenbits.xen.org/xsa/advisory-135.html Advisory