PT-2015-5872 · Qemu+2 · Qemu+2

Jan Beulich · Published 2015-04-01 · Updated 2018-10-30 · CVE-2015-2756

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions QEMU versions 3.3.x through 4.5.x

Description The issue is related to improper restriction of access to PCI command registers. This could allow local HVM guest users to cause a denial of service, resulting in a non-maskable interrupt and host crash. The denial of service can be triggered by disabling the memory or I/O decoding for a PCI Express device and then accessing the device, which leads to an Unsupported Request (UR) response.

Recommendations For QEMU versions 3.3.x through 4.5.x, consider restricting access to PCI command registers to prevent local HVM guest users from causing a denial of service. As a temporary workaround, restrict access to PCI Express devices to minimize the risk of exploitation.

Exploit

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-2756

DLA-479-1

DSA-3259-1

MGASA-2016-0098

OPENSUSE-SU-2015_0732-1

OPENSUSE-SU-2015_1092-1

SUSE-SU-2015:0701-1

SUSE-SU-2015:0745-1

SUSE-SU-2015:0746-1

SUSE-SU-2015:0747-1

USN-2608-1

Affected Products

Qemu

Suse

Ubuntu

References · 148

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• https://osv.dev/vulnerability/MGASA-2016-0098 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-2756 · Vendor Advisory
• https://security.gentoo.org/glsa/201504-04 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0098.html · Security Note
• https://ubuntu.com/security/CVE-2015-3456 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-2756 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1779 · Security Note
• https://ubuntu.com/security/notices/USN-2608-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-2756 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10460 · Security Note
• https://osv.dev/vulnerability/USN-2608-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10395 · Security Note
• https://osv.dev/vulnerability/DSA-3259-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10459 · Security Note