Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-8666
HistoryApr 11, 2017 - 7:59 p.m.

CVE-2015-8666

2017-04-1119:59:00
Debian Security Bug Tracker
security-tracker.debian.org
19

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

EPSS

0.001

Percentile

30.2%

Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.

OSVersionArchitecturePackageVersionFilename
Debian12allqemu<Β 1:2.5+dfsg-1qemu_1:2.5+dfsg-1_all.deb
Debian11allqemu<Β 1:2.5+dfsg-1qemu_1:2.5+dfsg-1_all.deb
Debian999allqemu<Β 1:2.5+dfsg-1qemu_1:2.5+dfsg-1_all.deb
Debian13allqemu<Β 1:2.5+dfsg-1qemu_1:2.5+dfsg-1_all.deb

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

EPSS

0.001

Percentile

30.2%