CVE-2015-5745
Severity CVSS v4.0:
Pending analysis
Type:
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Publication date:
23/01/2020
Last modified:
20/02/2022
Description
Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Base Score 2.0
4.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* | 2.4.0 (excluding) | |
cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:* | ||
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* | ||
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* | ||
cpe:2.3:o:arista:eos:4.12:*:*:*:*:*:*:* | ||
cpe:2.3:o:arista:eos:4.13:*:*:*:*:*:*:* | ||
cpe:2.3:o:arista:eos:4.14:*:*:*:*:*:*:* | ||
cpe:2.3:o:arista:eos:4.15:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html
- http://www.openwall.com/lists/oss-security/2015/08/06/3
- http://www.openwall.com/lists/oss-security/2015/08/06/5
- https://github.com/qemu/qemu/commit/7882080388be5088e72c425b02223c02e6cb4295
- https://lists.gnu.org/archive/html/qemu-devel/2015-07/msg05458.html
- https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13