PT-2015-1952 · Qemu+3 · Qemu+3

Martin Prpič · Published 2015-05-23 · Updated 2024-06-15 · CVE-2015-4037

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.3.0

Description The issue is related to errors in the code of the slirp smb function in the net/slirp.c component of the QEMU hardware emulator. This can be exploited by a local attacker using a specially crafted file, potentially leading to a denial of service. The slirp smb function creates temporary files with predictable names, allowing local users to cause an instantiation failure by creating specific files in the /tmp directory before the program.

Recommendations For QEMU versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the /tmp directory to prevent the creation of predictable temporary files.

Exploit

Fix

DoS

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1542

ALT-PU-2015-1865

BDU:2015-11298

CVE-2015-4037

DSA-3284-1

DSA-3285-1

MGASA-2015-0310

OPENSUSE-SU-2015_1964-1

OPENSUSE-SU-2015_2003-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2015:1519-1

SUSE-SU-2015:1853-1

SUSE-SU-2015:1894-1

SUSE-SU-2015:1908-1

SUSE-SU-2015:1952-1

USN-2630-1

Affected Products

Alt Linux

Qemu

Suse

Ubuntu

References · 255

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• https://ubuntu.com/security/CVE-2015-4103 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-4037 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-2630-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5278 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3209 · Security Note
• https://ubuntu.com/security/CVE-2015-4105 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2630-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-4037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-3209 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10460 · Security Note
• https://advisories.mageia.org/MGASA-2015-0310.html · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html · Vendor Advisory