Lucene search
Ubuntu.comUB:CVE-2015-3456HistoryMay 13, 2015 - 12:00 a.m.
CVE-2015-3456
2015-05-1300:00:00
ubuntu.com
ubuntu.com
15
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.1%
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier
and KVM, allows local guest users to cause a denial of service
(out-of-bounds write and guest crash) or possibly execute arbitrary code
via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or
other unspecified commands, aka VENOM.
Notes
| Author | Note |
|---|---|
| mdeslaur | See https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/VENOM |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | qemu | <Β 2.0.0+dfsg-2ubuntu1.11 | UNKNOWN |
| ubuntu | 14.10 | noarch | qemu | <Β 2.1+dfsg-4ubuntu6.6 | UNKNOWN |
| ubuntu | 15.04 | noarch | qemu | <Β 1:2.2+dfsg-5expubuntu9.1 | UNKNOWN |
| ubuntu | 12.04 | noarch | qemu-kvm | <Β 1.0+noroms-0ubuntu14.22 | UNKNOWN |
| ubuntu | 12.04 | noarch | virtualbox | <Β 4.1.12-dfsg-2ubuntu0.10 | UNKNOWN |
| ubuntu | 14.04 | noarch | virtualbox | <Β 4.3.10-dfsg-1ubuntu5 | UNKNOWN |
| ubuntu | 14.10 | noarch | virtualbox | <Β 4.3.18-dfsg-2ubuntu3 | UNKNOWN |
| ubuntu | 15.04 | noarch | virtualbox | <Β 4.3.26-dfsg-2ubuntu2 | UNKNOWN |
| ubuntu | 12.04 | noarch | xen | <Β 4.1.6.1-0ubuntu0.12.04.6 | UNKNOWN |
| ubuntu | 14.04 | noarch | xen | <Β 4.4.1-0ubuntu0.14.04.6 | UNKNOWN |
Related
osv
osv
xen - security update
2015-05-18 00:00:00
qemu-kvm - security update
2015-06-19 00:00:00
virtualbox - security update
2015-05-28 00:00:00
nessus
nessus
RHEL 6 : qemu-kvm-rhev (RHSA-2015:1001) (Venom)
2015-05-13 00:00:00
FreeBSD : qemu, xen and VirtualBox OSE -- possible VM escape and code execution ('VENOM') (2780e442-fc59-11e4-b18b-6805ca1d3bb1) (Venom)
2015-05-18 00:00:00
RHEL 5 : xen (RHSA-2015:1002) (Venom)
2015-05-13 00:00:00
threatpost
threatpost
Oracle Patches VENOM Vulnerability
2015-05-18 10:49:00
Flaw in Virtualization Software Could Lead to VM Escapes, Data Theft
2015-05-13 09:34:43
Oracle Patches Java Zero Day
2015-07-15 09:44:12
oraclelinux
oraclelinux
qemu-kvm security update
2015-05-13 00:00:00
xen security update
2015-05-13 00:00:00
kvm security update
2015-05-13 00:00:00
ibm
ibm
openvas
openvas
Oracle Linux Local Check: ELSA-2015-0998
2015-10-06 00:00:00
Oracle Linux Local Check: ELSA-2015-0999
2015-10-06 00:00:00
RedHat Update for qemu-kvm RHSA-2015:0999-01
2015-06-09 00:00:00
redhat
redhat
(RHSA-2015:0998) Important: qemu-kvm security update
2015-05-13 00:00:00
(RHSA-2015:1011) Important: rhev-hypervisor security update
2015-05-15 00:00:00
(RHSA-2015:1031) Important: qemu-kvm security update
2015-05-27 00:00:00
lenovo
lenovo
Venom - Lenovo Support US
2017-01-23 00:00:00
Venom
2017-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: qemu-2.3.0-4.fc22
2015-05-26 03:41:20
[SECURITY] Fedora 22 Update: xen-4.5.0-9.fc22
2015-05-26 03:43:40
[SECURITY] Fedora 22 Update: qemu-2.3.0-5.fc22
2015-06-11 18:35:42
checkpoint_security
checkpoint_security
Check Point response to CVE-2015-3456 (VENOM)
2015-05-12 21:00:00
archlinux
archlinux
qemu: arbitrary code execution
2015-05-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package qemu version 1.4.0-alt1.1.M70P.1
2015-05-15 00:00:00
suse
suse
Security update for KVM (important)
2015-05-16 00:04:49
Security update for qemu (important)
2015-05-18 14:04:51
Security update for Xen (important)
2015-05-26 14:06:51
fortinet
fortinet
CVE-2015-3456 "VENOM" vulnerability
2015-05-19 00:00:00
freebsd
freebsd
huawei
huawei
Security Advisory - VENOM Vulnerability in Huawei Products
2015-06-09 00:00:00
debian
debian
[SECURITY] [DLA 248-1] qemu security update
2015-06-19 15:05:33
[SECURITY] [DLA 249-1] qemu-kvm security update
2015-06-19 15:19:48
[SECURITY] [DSA 3274-1] virtualbox security update
2015-05-28 21:17:43
myhack58
myhack58
prion
prion
Out-of-bounds
2015-05-13 18:59:00
f5
f5
K16620 : QEMU vulnerability CVE-2015-3456
2015-10-03 00:00:00
SOL16620 - QEMU vulnerability CVE-2015-3456
2015-05-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:05:54
cve
cve
CVE-2015-3456
2015-05-13 18:59:00
centos
centos
xen security update
2015-05-13 15:16:55
qemu security update
2015-05-13 15:37:07
libcacard, qemu security update
2015-05-13 16:57:36
arista
arista
Security Advisory 0010
2015-05-14 00:00:00
xen
xen
Privilege escalation via emulated floppy disk drive
2015-05-13 11:15:00
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2015-05-15 21:23:49
Updated qemu packages fix CVE-2015-3456
2015-05-13 18:54:07
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
thn
thn
Why You Should Consider QEMU Live Patching
2021-09-23 11:16:00
Venom Vulnerability Exposes Most Data Centers to Cyber Attacks
2015-05-14 05:32:00
symantec
symantec
SA95 : VENOM Vulnerability in Virtualization Platforms
2015-05-15 08:00:00
debiancve
debiancve
CVE-2015-3456
2015-05-13 18:59:00
securityvulns
securityvulns
[USN-2608-1] QEMU vulnerabilities
2015-05-17 00:00:00
libvirt / qemu security vulnerabilities
2015-05-17 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-05-13 00:00:00
gentoo
gentoo
VirtualBox: Multiple vulnerabilities
2016-12-11 00:00:00
QEMU: Multiple vulnerabilities
2016-02-04 00:00:00
7.7 High
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:S/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
40.1%
Related for UB:CVE-2015-3456