PT-2015-7062 · Qemu+3 · Qemu+3

Prasad J Pandit · Published 2015-08-06 · Updated 2022-02-20 · CVE-2015-5745

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.4.0

Description The issue allows a guest user to cause a denial of service, resulting in the QEMU process crashing. This can be achieved by sending a crafted virtio control message. A user logged on to the guest OS can exploit this to cause QEMU to crash.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the send control msg function in the hw/char/virtio-serial-bus.c file until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2015-1865

CVE-2015-5745

DSA-3348-1

DSA-3349-1

MGASA-2015-0310

OPENSUSE-SU-2016_1750-1

SUSE-SU-2016:1560-1

SUSE-SU-2016:1698-1

SUSE-SU-2016:1703-1

SUSE-SU-2016:1785-1

SUSE-SU-2016_1703-1

USN-2724-1

Affected Products

Alt Linux

Qemu

Suse

Ubuntu

References · 122

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2015/08/06/5 · Exploit
• https://github.com/qemu/qemu/commit/7882080388be5088e72c425b02223c02e6cb4295 · Patch
• https://osv.dev/vulnerability/CVE-2015-5745 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5745 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1560-1 · Vendor Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2015-07/msg05458.html · Patch
• https://osv.dev/vulnerability/DSA-3349-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5166 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5745 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0310 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1703-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5745 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1785-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-5745 · Vendor Advisory