Lucene search
Ubuntu.comUB:CVE-2015-5154HistoryJul 27, 2015 - 12:00 a.m.
CVE-2015-5154
2015-07-2700:00:00
ubuntu.com
ubuntu.com
12
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
57.8%
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen
4.5.x and earlier, when the container has a CDROM drive enabled, allows
local guest users to execute arbitrary code on the host via unspecified
ATAPI commands.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | This is XSA-138 introduced by http://git.qemu.org/?p=qemu.git;a=commit;h=ce560dcf |
Related
nessus
nessus
Fedora 23 : xen-4.5.1-5.fc23 (2015-12679)
2015-08-11 00:00:00
SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1455-1)
2015-09-01 00:00:00
SUSE SLED11 / SLES11 Security Update : kvm (SUSE-SU-2015:1472-1)
2015-09-03 00:00:00
suse
suse
Security update for kvm (important)
2015-08-20 13:09:25
Security update for kvm (important)
2015-09-01 18:09:43
Security update for kvm (important)
2015-08-31 10:09:59
xen
xen
QEMU heap overflow flaw while processing certain ATAPI commands.
2015-07-27 12:00:00
threatpost
threatpost
Xen Patches VM Escape Flaw
2015-07-31 09:21:27
fedora
fedora
[SECURITY] Fedora 23 Update: xen-4.5.1-5.fc23
2015-08-10 10:03:14
[SECURITY] Fedora 21 Update: qemu-2.1.3-9.fc21
2015-09-01 07:30:01
[SECURITY] Fedora 23 Update: qemu-2.4.0-1.fc23
2015-08-23 16:43:19
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1472-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1409-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1455-1)
2021-06-09 00:00:00
prion
prion
Heap overflow
2015-08-12 14:59:00
cve
cve
CVE-2015-5154
2015-08-12 14:59:00
debiancve
debiancve
CVE-2015-5154
2015-08-12 14:59:00
freebsd
freebsd
qemu, xen-tools -- QEMU heap overflow flaw with certain ATAPI commands
2015-07-27 00:00:00
redhat
redhat
(RHSA-2015:1508) Important: qemu-kvm-rhev security update
2015-07-27 12:44:34
(RHSA-2015:1512) Important: qemu-kvm-rhev security update
2015-07-28 00:00:00
(RHSA-2015:1507) Important: qemu-kvm security and bug fix update
2015-07-27 00:00:00
centos
centos
libcacard, qemu security update
2015-07-27 17:01:12
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2015-07-27 00:00:00
veracode
veracode
Heap-Based Buffer Overflow
2019-05-02 05:41:34
f5
f5
securityvulns
securityvulns
[USN-2692-1] QEMU vulnerabilities
2015-08-03 00:00:00
libvirt / qemu multiple security vulnerabilities
2015-08-31 00:00:00
archlinux
archlinux
qemu: multiple issues
2015-07-29 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2015-07-28 00:00:00
gentoo
gentoo
QEMU: Arbitrary code execution
2015-10-31 00:00:00
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
debian
debian
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:30
[SECURITY] [DSA 3348-1] qemu security update
2015-09-02 16:22:30
osv
osv
qemu - security update
2015-09-02 00:00:00
arista
arista
Security Advisory 0013
2015-09-04 00:00:00
ibm
ibm
mageia
mageia
Updated qemu package fixes security vulnerability
2015-08-11 23:22:53
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
57.8%
Related for UB:CVE-2015-5154