CVEvulnerability
CVE-2012-3515
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Affected configurations
• qemu qemu (< 1.2.0)
• xen xen 4.0.0
• xen xen 4.1.0
• opensuse opensuse 11.4
• opensuse opensuse 12.1
• opensuse opensuse 12.2
• suse linux enterprise desktop 10
• suse linux enterprise desktop 11
• suse linux enterprise server 10
• suse linux enterprise server 11
• suse linux enterprise software development kit 10
• suse linux enterprise software development kit 11
• redhat virtualization 3.0
• redhat virtualization 5.0
• redhat virtualization 6.0
• redhat enterprise linux desktop 5.0
• redhat enterprise linux desktop 6.0
• redhat enterprise linux eus 6.3
• redhat enterprise linux server 5.0
• redhat enterprise linux server 6.0
• redhat enterprise linux workstation 5.0
• redhat enterprise linux workstation 6.0
• debian debian linux 6.0
• debian debian linux 7.0
• canonical ubuntu linux 10.04
• canonical ubuntu linux 11.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log git.qemu.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html Mailing List, Third Party Advisory
- http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html Mailing List, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1233.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1234.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1235.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1236.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1262.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1325.html Third Party Advisory
- http://secunia.com/advisories/50472 Third Party Advisory
- http://secunia.com/advisories/50528 Third Party Advisory
- http://secunia.com/advisories/50530 Third Party Advisory
- http://secunia.com/advisories/50632 Third Party Advisory
- http://secunia.com/advisories/50689 Third Party Advisory
- http://secunia.com/advisories/50860 Third Party Advisory
- http://secunia.com/advisories/50913 Third Party Advisory
- http://secunia.com/advisories/51413 Third Party Advisory
- http://secunia.com/advisories/55082 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory
- http://support.citrix.com/article/CTX134708 Third Party Advisory
- http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability Vendor Advisory
- http://www.debian.org/security/2012/dsa-2543 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2545 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/05/10 Mailing List, Mitigation, Third Party Advisory
- http://www.securityfocus.com/bid/55413 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1590-1 Third Party Advisory
- https://security.gentoo.org/glsa/201604-03 Third Party Advisory
- http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log git.qemu.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html Mailing List, Third Party Advisory
- http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html Mailing List, Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1233.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1234.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1235.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1236.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1262.html Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1325.html Third Party Advisory
- http://secunia.com/advisories/50472 Third Party Advisory
- http://secunia.com/advisories/50528 Third Party Advisory
- http://secunia.com/advisories/50530 Third Party Advisory
- http://secunia.com/advisories/50632 Third Party Advisory
- http://secunia.com/advisories/50689 Third Party Advisory
- http://secunia.com/advisories/50860 Third Party Advisory
- http://secunia.com/advisories/50913 Third Party Advisory
- http://secunia.com/advisories/51413 Third Party Advisory
- http://secunia.com/advisories/55082 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory
- http://support.citrix.com/article/CTX134708 Third Party Advisory
- http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability Vendor Advisory
- http://www.debian.org/security/2012/dsa-2543 Third Party Advisory
- http://www.debian.org/security/2012/dsa-2545 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2012/09/05/10 Mailing List, Mitigation, Third Party Advisory
- http://www.securityfocus.com/bid/55413 Third Party Advisory, VDB Entry