Lucene search
GoogleOSV:DLA-248-1HistoryJun 19, 2015 - 12:00 a.m.
qemu - security update
2015-06-1900:00:00
Google
osv.dev
5
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
A vulnerability was discovered in the qemu virtualisation solution:
- CVE-2015-3456
Jason Geffner discovered a buffer overflow in the emulated floppy
disk drive, resulting in the potential execution of arbitrary code.
Despite the end-of-life of qemu support in the old-oldstable
distribution (squeeze-lts), this problem has been fixed in version
0.12.5+dfsg-3squeeze4 of the qemu source package due to its severity
(the so-called VENOM vulnerability).
Further problems may still be present in the qemu package in the
old-oldstable distribution (squeeze-lts) and users who need to rely on
qemu are encouraged to upgrade to a newer version of Debian.
We recommend that you upgrade your qemu packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu | eq | 0.12.5+dfsg-3squeeze1 | |
| qemu | eq | 0.12.5+dfsg-3squeeze3 | |
| qemu | eq | 0.12.5+dfsg-3 | |
| qemu | eq | 0.12.5+dfsg-3squeeze2 | |
| qemu | eq | 0.12.5+dfsg-3squeeze4 |
References
Related
checkpoint_security
checkpoint_security
Check Point response to CVE-2015-3456 (VENOM)
2015-05-12 21:00:00
archlinux
archlinux
qemu: arbitrary code execution
2015-05-14 00:00:00
lenovo
lenovo
Venom
2017-01-23 00:00:00
Venom - Lenovo Support US
2017-01-23 00:00:00
redhat
redhat
(RHSA-2015:1011) Important: rhev-hypervisor security update
2015-05-15 00:00:00
(RHSA-2015:1031) Important: qemu-kvm security update
2015-05-27 00:00:00
(RHSA-2015:1001) Important: qemu-kvm-rhev security update
2015-05-13 00:00:00
osv
osv
virtualbox - security update
2015-05-28 00:00:00
xen - security update
2015-05-18 00:00:00
qemu-kvm - security update
2015-06-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package qemu version 1.4.0-alt1.1.M70P.1
2015-05-15 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.0-9.fc22
2015-05-26 03:43:40
[SECURITY] Fedora 22 Update: qemu-2.3.0-4.fc22
2015-05-26 03:41:20
[SECURITY] Fedora 22 Update: qemu-2.3.0-5.fc22
2015-06-11 18:35:42
openvas
openvas
Debian Security Advisory DSA 3262-1 (xen - security update)
2015-05-18 00:00:00
RedHat Update for xen RHSA-2015:1002-01
2015-06-09 00:00:00
Oracle Linux Local Check: ELSA-2015-0999
2015-10-06 00:00:00
suse
suse
Security update for KVM (important)
2015-05-16 00:04:49
Security update for qemu (important)
2015-05-18 14:04:51
Security update for Xen (important)
2015-05-26 14:06:51
nessus
nessus
Oracle Linux 7 : qemu-kvm (ELSA-2015-0999) (Venom)
2015-05-14 00:00:00
CentOS 5 : xen (CESA-2015:1002) (Venom)
2015-05-13 00:00:00
RHEL 7 : qemu-kvm (RHSA-2015:0999) (Venom)
2015-05-13 00:00:00
fortinet
fortinet
CVE-2015-3456 "VENOM" vulnerability
2015-05-19 00:00:00
freebsd
freebsd
huawei
huawei
Security Advisory - VENOM Vulnerability in Huawei Products
2015-06-09 00:00:00
debian
debian
[SECURITY] [DLA 248-1] qemu security update
2015-06-19 15:05:33
[SECURITY] [DSA 3274-1] virtualbox security update
2015-05-28 21:17:43
[SECURITY] [DLA 249-1] qemu-kvm security update
2015-06-19 15:19:48
threatpost
threatpost
Oracle Patches VENOM Vulnerability
2015-05-18 10:49:00
Flaw in Virtualization Software Could Lead to VM Escapes, Data Theft
2015-05-13 09:34:43
Oracle Patches Java Zero Day
2015-07-15 09:44:12
ibm
ibm
oraclelinux
oraclelinux
qemu-kvm security update
2015-05-13 00:00:00
xen security update
2015-05-13 00:00:00
kvm security update
2015-05-13 00:00:00
myhack58
myhack58
prion
prion
Out-of-bounds
2015-05-13 18:59:00
f5
f5
K16620 : QEMU vulnerability CVE-2015-3456
2015-10-03 00:00:00
SOL16620 - QEMU vulnerability CVE-2015-3456
2015-05-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:05:54
cve
cve
CVE-2015-3456
2015-05-13 18:59:00
centos
centos
xen security update
2015-05-13 15:16:55
qemu security update
2015-05-13 15:37:07
libcacard, qemu security update
2015-05-13 16:57:36
arista
arista
Security Advisory 0010
2015-05-14 00:00:00
xen
xen
Privilege escalation via emulated floppy disk drive
2015-05-13 11:15:00
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2015-05-15 21:23:49
Updated qemu packages fix CVE-2015-3456
2015-05-13 18:54:07
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
ubuntucve
ubuntucve
CVE-2015-3456
2015-05-13 00:00:00
thn
thn
Why You Should Consider QEMU Live Patching
2021-09-23 11:16:00
Venom Vulnerability Exposes Most Data Centers to Cyber Attacks
2015-05-14 05:32:00
symantec
symantec
SA95 : VENOM Vulnerability in Virtualization Platforms
2015-05-15 08:00:00
debiancve
debiancve
CVE-2015-3456
2015-05-13 18:59:00
securityvulns
securityvulns
[USN-2608-1] QEMU vulnerabilities
2015-05-17 00:00:00
libvirt / qemu security vulnerabilities
2015-05-17 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-05-13 00:00:00
gentoo
gentoo
VirtualBox: Multiple vulnerabilities
2016-12-11 00:00:00
QEMU: Multiple vulnerabilities
2016-02-04 00:00:00
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
Related for OSV:DLA-248-1