cve-2015-3456

与 CVE-2015-3456 相关的实验 其中包含： exploit/ 是一个“漏洞利用程序”（它只会让 QEMU 崩溃）。 mock/ 包含一个精简版的 QEMU，仅保留漏洞本身。 patch/ 包含一个用于对正在运行的 QEMU 实例进行修补的程序。其主要目的是无需调试符号，也无需磁盘上的原始可执行文件。因此，需要为此程序提供一些信息才能使其按预期工作。 所有热补丁的核心思路是修改 commandtohandler 数组，使每个命令都指向“未实现”函数。当进程被 ptrace 部分暂停（仅主线程）时，这似乎是一种修复漏洞的安全方式（只要你不关心软盘控制器不再工作）。...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003825 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...

SUSE CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...

SUSE CVE-2021-20261

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device /dev/fd0 are restricted to root. If the permissions on the device have changed the...

DEBIAN-CVE-2015-3456

The Floppy Disk Controller FDC in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service out-of-bounds write and guest crash or possibly execute arbitrary code via the 1 FDCMDREADID, 2 FDCMDDRIVESPECIFICATIONCOMMAND, or other unspecified commands, ak...

CVE-2007-2894

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service virtual machine crash via unspecified vectors, resulting in a divide-by-zero error...