Lucene search
PRIOn knowledge basePRION:CVE-2015-8743HistoryDec 29, 2016 - 10:59 p.m.
Design/Logic Flaw
2016-12-2922:59:00
PRIOn knowledge base
www.prio-n.com
3
QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing ‘ioport’ r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| qemu | le | 2.5.1 |
References
www.debian.org/security/2016/dsa-3469
www.debian.org/security/2016/dsa-3470
www.debian.org/security/2016/dsa-3471
www.openwall.com/lists/oss-security/2016/01/04/1
www.openwall.com/lists/oss-security/2016/01/04/2
www.securityfocus.com/bid/79820
www.securitytracker.com/id/1034574
bugzilla.redhat.com/show_bug.cgi?id=1264929
lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html
security.gentoo.org/glsa/201602-01
Related
cvelist
cvelist
CVE-2015-8743
2016-12-29 22:00:00
debiancve
debiancve
CVE-2015-8743
2016-12-29 22:59:00
cve
cve
CVE-2015-8743
2016-12-29 22:59:00
ubuntucve
ubuntucve
CVE-2015-8743
2016-01-04 00:00:00
nvd
nvd
CVE-2015-8743
2016-12-29 22:59:00
ibm
ibm
nessus
nessus
Fedora 22 : qemu-2.3.1-11.fc22 (2016-275e9ff483)
2016-03-04 00:00:00
SUSE SLES10 Security Update : Xen (SUSE-SU-2016:1445-1)
2016-06-17 00:00:00
Fedora 23 : qemu-2.4.1-6.fc23 (2016-42778e8c82)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: qemu-2.3.1-11.fc22
2016-02-02 00:56:23
[SECURITY] Fedora 23 Update: qemu-2.4.1-6.fc23
2016-01-24 03:34:25
[SECURITY] Fedora 22 Update: xen-4.5.2-7.fc22
2016-02-01 06:35:52
openvas
openvas
Fedora Update for qemu FEDORA-2016-275
2016-02-05 00:00:00
Fedora Update for qemu FEDORA-2016-42778
2016-01-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1445-1)
2021-06-09 00:00:00
suse
suse
Security update for Xen (important)
2016-05-30 19:08:35
Security update for xen (important)
2016-03-30 20:07:33
Security update for xen (important)
2016-04-26 16:08:08
debian
debian
[SECURITY] [DSA 3469-1] qemu security update
2016-02-08 19:45:45
[SECURITY] [DSA 3469-1] qemu security update
2016-02-08 19:45:45
[SECURITY] [DSA 3470-1] qemu-kvm security update
2016-02-08 19:45:53
osv
osv
qemu-kvm - security update
2016-02-08 00:00:00
qemu - security update
2016-02-08 00:00:00
qemu - security update
2016-02-08 00:00:00
mageia
mageia
Updated qemu packages fix security vulnerabilities
2016-01-17 03:26:26
ubuntu
ubuntu
QEMU vulnerabilities
2016-02-03 00:00:00
gentoo
gentoo
QEMU: Multiple vulnerabilities
2016-02-04 00:00:00