← volver
CVE-2015-5154

CVE-2015-5154

EPSS 0.6%
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1507.html