← voltar
CVE-2015-5154

CVE-2015-5154

EPSS 0.6%
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1507.html