CVE-2015-3215

The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP packet, as demonstrated by a value that does not account for the size of the IP options.

• CWE-20

• http://rhn.redhat.com/errata/RHSA-2015-1043.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1044.htmlVendor Advisory
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1Patch, Third Party Advisory
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238Patch, Third Party Advisory
• https://www.redhat.com/security/data/cve/CVE-2015-3215.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1043.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1044.htmlVendor Advisory
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/723416fa4210b7464b28eab89cc76252e6193ac1Patch, Third Party Advisory
• https://github.com/YanVugenfirer/kvm-guest-drivers-windows/commit/fbfa4d1083ea84c5429992ca3e996d7d4fbc8238Patch, Third Party Advisory
• https://www.redhat.com/security/data/cve/CVE-2015-3215.htmlVendor Advisory

Published

Jun 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3209Heap-based buffer overflow in the PCNET controller in QEMU a…
• CVE-2015-3210Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCR…9.8
• CVE-2015-3211php-fpm allows local users to write to or create arbitrary f…
• CVE-2015-3212Race condition in net/sctp/socket.c in the Linux kernel befo…
• CVE-2015-3213The gesture handling code in Clutter before 1.16.2 allows ph…
• CVE-2015-3214The pit_ioport_read in i8254.c in the Linux kernel before 2.…
• CVE-2015-3216Race condition in a certain Red Hat patch to the PRNG lock i…
• CVE-2015-3217PCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle gr…
• CVE-2015-3218The authentication_agent_new function in polkitbackend/polki…
• CVE-2015-3219Cross-site scripting (XSS) vulnerability in the Orchestratio…
• CVE-2015-3220The tlslite library before 0.4.9 for Python allows remote at…
• CVE-2015-3221OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before…