Buffer overflow in Qemu
CVE-2015-5154
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
Vulnerability class: Buffer Overflow
EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.
Affected products
- Qemu
- Xen — versions 4.5.1
- Fedoraproject Fedora — versions 21, 22, 23
- Suse Linux_enterprise_debuginfo — versions 11
- Suse Linux_enterprise_desktop — versions 11, 12
- Suse Linux_enterprise_server — versions 11
- Suse Linux_enterprise_software_development_kit — versions 11, 12
- Suse Suse_linux_enterprise_server — versions 12
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA, Third Party Advisory)