CVE-2015-5158

Related Files

Gentoo Linux Security Advisory 201510-02

Posted Nov 2, 2015

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201510-2 - A heap-based buffer overflow in QEMU could result in execution of arbitrary code. Versions less than 2.3.0-r4 are affected.

tags | advisory, overflow, arbitrary

systems | linux, gentoo

advisories | CVE-2015-3209, CVE-2015-3214, CVE-2015-5154, CVE-2015-5158

SHA-256 | 947d9bf965c7d67dffe41ba0520fc50e4a6c74e1a0831f6018772274dde8386f

Download | Favorite | View

Ubuntu Security Notice USN-2692-1

Posted Jul 29, 2015

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2692-1 - Matt Tait discovered that QEMU incorrectly handled PIT emulation. In a non-default configuration, a malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. Kevin Wolf discovered that QEMU incorrectly handled processing ATAPI commands. A malicious guest could use this issue to cause a denial of service, or possibly execute arbitrary code on the host as the user running the QEMU process. In the default installation, when QEMU is used with libvirt, attackers would be isolated by the libvirt AppArmor profile. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2015-3214, CVE-2015-5154, CVE-2015-5158

SHA-256 | 3ce14f5f91a3957a62189bc98416489ca3815723c67a8c178b27bc6f07b581b9

Download | Favorite | View