Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-4106

Опубликовано: 03 июн. 2015
Источник: ubuntu
Приоритет: medium
CVSS2: 4.6

Описание

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

РелизСтатусПримечание
devel

not-affected

1:2.3+dfsg-5ubuntu1
esm-infra-legacy/trusty

released

2.0.0+dfsg-2ubuntu1.13
precise

DNE

trusty

released

2.0.0+dfsg-2ubuntu1.13
trusty/esm

released

2.0.0+dfsg-2ubuntu1.13
upstream

needed

utopic

released

2.1+dfsg-4ubuntu6.7
vivid

released

1:2.2+dfsg-5expubuntu9.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

code not present
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

utopic

DNE

vivid

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.2-0ubuntu0.14.04.2]]
precise

released

4.1.6.1-0ubuntu0.12.04.6
trusty

released

4.4.2-0ubuntu0.14.04.2
trusty/esm

DNE

trusty was released [4.4.2-0ubuntu0.14.04.2]
upstream

needed

utopic

ignored

end of life
vivid

not-affected

code not present

Показывать по

4.6 Medium

CVSS2

Связанные уязвимости

redhat
больше 10 лет назад

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

nvd
больше 10 лет назад

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

debian
больше 10 лет назад

QEMU does not properly restrict write access to the PCI config space f ...

github
больше 3 лет назад

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

fstec
больше 10 лет назад

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю повысить свои привилегии, вызвать отказ в обслуживании или получить доступ к защищаемой информации

4.6 Medium

CVSS2