CVEvulnerability
CVE-2015-4106
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-863
Description
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
Affected configurations
• qemu qemu (<= 2.3.1)
• debian debian linux 7.0
• debian debian linux 8.0
• fedoraproject fedora 20
• fedoraproject fedora 21
• fedoraproject fedora 22
• suse linux enterprise desktop 11
• suse linux enterprise desktop 12
• suse linux enterprise server 11
• suse linux enterprise server 12
• suse linux enterprise software development kit 11
• suse linux enterprise software development kit 12
• citrix xenserver 6.0
• citrix xenserver 6.0.2
• citrix xenserver 6.1.0
• citrix xenserver 6.2.0
• citrix xenserver 6.5
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
• canonical ubuntu linux 15.04
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html Mailing List, Third Party Advisory
- http://support.citrix.com/article/CTX201145 Third Party Advisory
- http://www.debian.org/security/2015/dsa-3284 Third Party Advisory
- http://www.debian.org/security/2015/dsa-3286 Third Party Advisory
- http://www.securityfocus.com/bid/74949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032467 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2630-1 Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-131.html Third Party Advisory
- https://security.gentoo.org/glsa/201604-03 Third Party Advisory
- https://support.citrix.com/article/CTX206006 Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html Mailing List, Third Party Advisory
- http://support.citrix.com/article/CTX201145 Third Party Advisory
- http://www.debian.org/security/2015/dsa-3284 Third Party Advisory
- http://www.debian.org/security/2015/dsa-3286 Third Party Advisory
- http://www.securityfocus.com/bid/74949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032467 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2630-1 Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-131.html Third Party Advisory
- https://security.gentoo.org/glsa/201604-03 Third Party Advisory
- https://support.citrix.com/article/CTX206006 Third Party Advisory