Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-5154HistoryAug 12, 2015 - 2:59 p.m.
CVE-2015-5154
2015-08-1214:59:00
Debian Security Bug Tracker
security-tracker.debian.org
16
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
57.8%
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | qemu | < 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 11 | all | qemu | < 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 10 | all | qemu | < 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 999 | all | qemu | < 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 13 | all | qemu | < 1:2.4+dfsg-1a | qemu_1:2.4+dfsg-1a_all.deb |
| Debian | 12 | all | xen | < 4.4.0-1 | xen_4.4.0-1_all.deb |
| Debian | 11 | all | xen | < 4.4.0-1 | xen_4.4.0-1_all.deb |
| Debian | 10 | all | xen | < 4.4.0-1 | xen_4.4.0-1_all.deb |
| Debian | 999 | all | xen | < 4.4.0-1 | xen_4.4.0-1_all.deb |
| Debian | 13 | all | xen | < 4.4.0-1 | xen_4.4.0-1_all.deb |
Related
threatpost
threatpost
Xen Patches VM Escape Flaw
2015-07-31 09:21:27
suse
suse
Security update for kvm (important)
2015-09-01 18:09:43
Security update for kvm (important)
2015-08-31 10:09:59
Security update for kvm (important)
2015-08-20 13:09:25
nessus
nessus
SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1455-1)
2015-09-01 00:00:00
SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1472-1)
2015-09-03 00:00:00
Fedora 21 : xen-4.4.2-9.fc21 (2015-12714)
2015-08-13 00:00:00
ubuntucve
ubuntucve
CVE-2015-5154
2015-07-27 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: xen-4.5.1-5.fc23
2015-08-10 10:03:14
[SECURITY] Fedora 21 Update: qemu-2.1.3-9.fc21
2015-09-01 07:30:01
[SECURITY] Fedora 23 Update: qemu-2.4.0-1.fc23
2015-08-23 16:43:19
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1472-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1409-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1455-1)
2021-06-09 00:00:00
xen
xen
QEMU heap overflow flaw while processing certain ATAPI commands.
2015-07-27 12:00:00
prion
prion
Heap overflow
2015-08-12 14:59:00
cve
cve
CVE-2015-5154
2015-08-12 14:59:00
freebsd
freebsd
qemu, xen-tools -- QEMU heap overflow flaw with certain ATAPI commands
2015-07-27 00:00:00
redhat
redhat
(RHSA-2015:1512) Important: qemu-kvm-rhev security update
2015-07-28 00:00:00
(RHSA-2015:1507) Important: qemu-kvm security and bug fix update
2015-07-27 00:00:00
(RHSA-2015:1508) Important: qemu-kvm-rhev security update
2015-07-27 12:44:34
centos
centos
libcacard, qemu security update
2015-07-27 17:01:12
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2015-07-27 00:00:00
veracode
veracode
Heap-Based Buffer Overflow
2019-05-02 05:41:34
f5
f5
securityvulns
securityvulns
[USN-2692-1] QEMU vulnerabilities
2015-08-03 00:00:00
libvirt / qemu multiple security vulnerabilities
2015-08-31 00:00:00
archlinux
archlinux
qemu: multiple issues
2015-07-29 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-07-28 00:00:00
gentoo
gentoo
QEMU: Arbitrary code execution
2015-10-31 00:00:00
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
debian
debian
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:30
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:30
osv
osv
qemu - security update
2015-09-02 00:00:00
ibm
ibm
arista
arista
Security Advisory 0013
2015-09-04 00:00:00
mageia
mageia
Updated qemu package fixes security vulnerability
2015-08-11 23:22:53
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
57.8%
Related for DEBIANCVE:CVE-2015-5154