CVEvulnerability

CVE-2015-3456

7.7 HIGH Published 2015-05-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-05-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.

Affected configurations

• qemu qemu (<= 2.3.0) • redhat enterprise virtualization 3.0 • redhat openstack 4.0 • redhat openstack 5.0 • redhat openstack 6.0 • redhat openstack 7.0 • redhat enterprise linux 5 • redhat enterprise linux 6.0 • redhat enterprise linux 7.0 • xen xen 4.5.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References