Lucene search
Gentoo FoundationMGASA-2015-0228HistoryMay 15, 2015 - 9:23 p.m.
Updated virtualbox packages fix security vulnerabilities
2015-05-1521:23:49
Gentoo Foundation
advisories.mageia.org
7
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.0%
Updated virtualbox packages fixes security vulnerability This update provides the 4.3.28 maintenance release fixing the following security issue: The Floppy Disk Controller (FDC) in QEMU, XEN, KVM and virtualbox allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the FD_CMD_READ_ID, FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM (CVE-2015-3456). For other fixes in the maintenance release, read the referenced changelog.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | kmod-vboxadditions | <Β 4.3.28-1 | kmod-vboxadditions-4.3.28-1.mga4 |
| Mageia | 4 | noarch | kmod-virtualbox | <Β 4.3.28-1 | kmod-virtualbox-4.3.28-1.mga4 |
| Mageia | 4 | noarch | virtualbox | <Β 4.3.28-1 | virtualbox-4.3.28-1.mga4 |
Related
checkpoint_security
checkpoint_security
Check Point response to CVE-2015-3456 (VENOM)
2015-05-12 21:00:00
archlinux
archlinux
qemu: arbitrary code execution
2015-05-14 00:00:00
redhat
redhat
(RHSA-2015:1011) Important: rhev-hypervisor security update
2015-05-15 00:00:00
(RHSA-2015:1031) Important: qemu-kvm security update
2015-05-27 00:00:00
(RHSA-2015:1001) Important: qemu-kvm-rhev security update
2015-05-13 00:00:00
osv
osv
virtualbox - security update
2015-05-28 00:00:00
qemu-kvm - security update
2015-06-19 00:00:00
xen - security update
2015-05-18 00:00:00
openvas
openvas
Debian Security Advisory DSA 3262-1 (xen - security update)
2015-05-18 00:00:00
RedHat Update for xen RHSA-2015:1002-01
2015-06-09 00:00:00
Debian: Security Advisory (DLA-248-1)
2023-03-08 00:00:00
fortinet
fortinet
CVE-2015-3456 "VENOM" vulnerability
2015-05-19 00:00:00
nessus
nessus
CentOS 5 : xen (CESA-2015:1002) (Venom)
2015-05-13 00:00:00
Oracle Linux 7 : qemu-kvm (ELSA-2015-0999) (Venom)
2015-05-14 00:00:00
RHEL 7 : qemu-kvm (RHSA-2015:0999) (Venom)
2015-05-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package qemu version 1.4.0-alt1.1.M70P.1
2015-05-15 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.0-9.fc22
2015-05-26 03:43:40
[SECURITY] Fedora 22 Update: qemu-2.3.0-4.fc22
2015-05-26 03:41:20
[SECURITY] Fedora 22 Update: qemu-2.3.0-5.fc22
2015-06-11 18:35:42
suse
suse
Security update for KVM (important)
2015-05-16 00:04:49
Security update for qemu (important)
2015-05-18 14:04:51
Security update for Xen (important)
2015-05-26 14:06:51
debian
debian
[SECURITY] [DLA 248-1] qemu security update
2015-06-19 15:05:33
[SECURITY] [DLA 249-1] qemu-kvm security update
2015-06-19 15:19:48
[SECURITY] [DSA 3274-1] virtualbox security update
2015-05-28 21:17:43
lenovo
lenovo
Venom
2017-01-23 00:00:00
Venom - Lenovo Support US
2017-01-23 00:00:00
huawei
huawei
Security Advisory - VENOM Vulnerability in Huawei Products
2015-06-09 00:00:00
freebsd
freebsd
threatpost
threatpost
Oracle Patches VENOM Vulnerability
2015-05-18 10:49:00
Flaw in Virtualization Software Could Lead to VM Escapes, Data Theft
2015-05-13 09:34:43
Oracle Patches Java Zero Day
2015-07-15 09:44:12
oraclelinux
oraclelinux
qemu-kvm security update
2015-05-13 00:00:00
xen security update
2015-05-13 00:00:00
kvm security update
2015-05-13 00:00:00
ibm
ibm
myhack58
myhack58
prion
prion
Out-of-bounds
2015-05-13 18:59:00
f5
f5
K16620 : QEMU vulnerability CVE-2015-3456
2015-10-03 00:00:00
SOL16620 - QEMU vulnerability CVE-2015-3456
2015-05-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:05:54
cve
cve
CVE-2015-3456
2015-05-13 18:59:00
centos
centos
xen security update
2015-05-13 15:16:55
qemu security update
2015-05-13 15:37:07
libcacard, qemu security update
2015-05-13 16:57:36
ubuntucve
ubuntucve
CVE-2015-3456
2015-05-13 00:00:00
arista
arista
Security Advisory 0010
2015-05-14 00:00:00
xen
xen
Privilege escalation via emulated floppy disk drive
2015-05-13 11:15:00
thn
thn
Venom Vulnerability Exposes Most Data Centers to Cyber Attacks
2015-05-14 05:32:00
Why You Should Consider QEMU Live Patching
2021-09-23 11:16:00
symantec
symantec
SA95 : VENOM Vulnerability in Virtualization Platforms
2015-05-15 08:00:00
debiancve
debiancve
CVE-2015-3456
2015-05-13 18:59:00
mageia
mageia
Updated qemu packages fix CVE-2015-3456
2015-05-13 18:54:07
securityvulns
securityvulns
[USN-2608-1] QEMU vulnerabilities
2015-05-17 00:00:00
libvirt / qemu security vulnerabilities
2015-05-17 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-05-13 00:00:00
gentoo
gentoo
VirtualBox: Multiple vulnerabilities
2016-12-11 00:00:00
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.0%
Related for MGASA-2015-0228