Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.703362
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 3362-1 (qemu-kvm - security update)
Summary:Several vulnerabilities were discovered in qemu-kvm, a full;virtualization solution on x86 hardware.;;CVE-2015-5278;Qinghao Tang of QIHU 360 Inc. discovered an infinite loop issue in;the NE2000 NIC emulation. A privileged guest user could use this;flaw to mount a denial of service (QEMU process crash).;;CVE-2015-5279;Qinghao Tang of QIHU 360 Inc. discovered a heap buffer overflow flaw;in the NE2000 NIC emulation. A privileged guest user could use this;flaw to mount a denial of service (QEMU process crash), or;potentially to execute arbitrary code on the host with the;privileges of the hosting QEMU process.;;CVE-2015-6815;Qinghao Tang of QIHU 360 Inc. discovered an infinite loop issue in;the e1000 NIC emulation. A privileged guest user could use this flaw;to mount a denial of service (QEMU process crash).;;CVE-2015-6855;Qinghao Tang of QIHU 360 Inc. discovered a flaw in the IDE;subsystem in QEMU occurring while executing IDE's;WIN_READ_NATIVE_MAX command to determine the maximum size of a;drive. A privileged guest user could use this flaw to mount a;denial of service (QEMU process crash).
Description:Summary:
Several vulnerabilities were discovered in qemu-kvm, a full
virtualization solution on x86 hardware.

CVE-2015-5278
Qinghao Tang of QIHU 360 Inc. discovered an infinite loop issue in
the NE2000 NIC emulation. A privileged guest user could use this
flaw to mount a denial of service (QEMU process crash).

CVE-2015-5279
Qinghao Tang of QIHU 360 Inc. discovered a heap buffer overflow flaw
in the NE2000 NIC emulation. A privileged guest user could use this
flaw to mount a denial of service (QEMU process crash), or
potentially to execute arbitrary code on the host with the
privileges of the hosting QEMU process.

CVE-2015-6815
Qinghao Tang of QIHU 360 Inc. discovered an infinite loop issue in
the e1000 NIC emulation. A privileged guest user could use this flaw
to mount a denial of service (QEMU process crash).

CVE-2015-6855
Qinghao Tang of QIHU 360 Inc. discovered a flaw in the IDE
subsystem in QEMU occurring while executing IDE's
WIN_READ_NATIVE_MAX command to determine the maximum size of a
drive. A privileged guest user could use this flaw to mount a
denial of service (QEMU process crash).

Affected Software/OS:
qemu-kvm on Debian Linux

Solution:
For the oldstable distribution (wheezy), these problems have been fixed
in version 1.1.2+dfsg-6+deb7u11.

We recommend that you upgrade your qemu-kvm packages.

CVSS Score:
7.2

CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2015-5278
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
http://www.openwall.com/lists/oss-security/2015/09/15/2
http://www.ubuntu.com/usn/USN-2745-1
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03985.html
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html
Common Vulnerability Exposure (CVE) ID: CVE-2015-5279
BugTraq ID: 76746
http://www.securityfocus.com/bid/76746
Debian Security Information: DSA-3361 (Google Search)
http://www.debian.org/security/2015/dsa-3361
Debian Security Information: DSA-3362 (Google Search)
http://www.debian.org/security/2015/dsa-3362
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html
https://security.gentoo.org/glsa/201602-01
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html
http://www.openwall.com/lists/oss-security/2015/09/15/3
RedHat Security Advisories: RHSA-2015:1896
http://rhn.redhat.com/errata/RHSA-2015-1896.html
RedHat Security Advisories: RHSA-2015:1923
http://rhn.redhat.com/errata/RHSA-2015-1923.html
RedHat Security Advisories: RHSA-2015:1924
http://rhn.redhat.com/errata/RHSA-2015-1924.html
RedHat Security Advisories: RHSA-2015:1925
http://rhn.redhat.com/errata/RHSA-2015-1925.html
http://www.securitytracker.com/id/1033569
SuSE Security Announcement: SUSE-SU-2015:1782 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
Common Vulnerability Exposure (CVE) ID: CVE-2015-6815
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html
http://www.openwall.com/lists/oss-security/2015/09/04/4
http://www.openwall.com/lists/oss-security/2015/09/05/5
https://bugzilla.redhat.com/show_bug.cgi?id=1260076
Common Vulnerability Exposure (CVE) ID: CVE-2015-6855
BugTraq ID: 76691
http://www.securityfocus.com/bid/76691
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169327.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168602.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169341.html
https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg02479.html
http://www.openwall.com/lists/oss-security/2015/09/10/1
http://www.openwall.com/lists/oss-security/2015/09/10/2
CopyrightCopyright (C) 2015 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.