7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
A vulnerability was discovered in the qemu virtualisation solution:
Despite the end-of-life of qemu support in the old-oldstable
distribution (squeeze-lts), this problem has been fixed in version
0.12.5+dfsg-3squeeze4 of the qemu source package due to its severity
(the so-called VENOM vulnerability).
Further problems may still be present in the qemu package in the
old-oldstable distribution (squeeze-lts) and users who need to rely on
qemu are encouraged to upgrade to a newer version of Debian.
We recommend that you upgrade your qemu packages.
CPE | Name | Operator | Version |
---|---|---|---|
qemu | eq | 0.12.5+dfsg-3squeeze1 | |
qemu | eq | 0.12.5+dfsg-3squeeze3 | |
qemu | eq | 0.12.5+dfsg-3 | |
qemu | eq | 0.12.5+dfsg-3squeeze2 | |
qemu | eq | 0.12.5+dfsg-3squeeze4 |