CVE-2015-5158

Опубликовано: 12 апр. 2016

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance crash) via an invalid opcode in a SCSI command descriptor block.

Ссылки

http://www.securityfocus.com/bid/76016
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033095
Third Party Advisory
VDB Entry
https://lists.nongnu.org/archive/html/qemu-devel/2015-07/msg04558.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201510-02
Third Party Advisory
http://www.securityfocus.com/bid/76016
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1033095
Third Party Advisory
VDB Entry
https://lists.nongnu.org/archive/html/qemu-devel/2015-07/msg04558.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201510-02
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.4.0 (исключая)

cpe:2.3:a:qemu:qemu:2.4.0:-:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.4.0:rc1:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.4.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00081

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2015-5158

CVSS3: 5.5

ubuntu

почти 10 лет назад

CVE-2015-5158

redhat

больше 10 лет назад

CVE-2015-5158

CVSS3: 5.5

debian

почти 10 лет назад

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built ...

GHSA-gx3q-72jh-pq5j

CVSS3: 5.5

github

больше 3 лет назад

EPSS

Процентиль: 24%

0.00081

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787