CVE-2015-3456
NoneCVSS
—
EPSS
15.3%
Published
May 13, 2015
CISA due date
—
The record
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | qemu | 0 | 1:2.3+dfsg-3 |
| Debian:11 | xen | 0 | 4.4.0-1 |
| Debian:12 | qemu | 0 | 1:2.3+dfsg-3 |
| Debian:12 | xen | 0 | 4.4.0-1 |
| Debian:13 | qemu | 0 | 1:2.3+dfsg-3 |
| Debian:13 | xen | 0 | 4.4.0-1 |
| Debian:6.0 | qemu | 0 | 0.12.5+dfsg-3squeeze5 |
| Debian:6.0 | qemu-kvm | 0 | 0.12.5+dfsg-5+squeeze12 |
| Debian:6.0 | virtualbox-ose | 0 | 3.2.10-dfsg-1+squeeze4 |
| Debian:7 | virtualbox | 0 | 4.1.18-dfsg-2+deb7u5 |
| Debian:7 | xen | 0 | 4.1.4-3+deb7u6 |
| Debian:8 | qemu | 0 | 1:2.1+dfsg-12 |
| Debian:8 | virtualbox | 0 | 4.3.18-dfsg-3+deb8u2 |
| Mageia:4 | kmod-vboxadditions | 0 | 4.3.28-1.mga4 |
| Mageia:4 | kmod-virtualbox | 0 | 4.3.28-1.mga4 |
| Mageia:4 | qemu | 0 | 1.6.2-1.10.mga4 |
| Mageia:4 | virtualbox | 0 | 4.3.28-1.mga4 |
| Mageia:5 | xen | 0 | 4.5.2-1.5.mga5 |
| Red Hat:enterprise_linux:5::client | xen | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::client | xen-debuginfo | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::client | xen-devel | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::client | xen-libs | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::server | xen | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::server | xen-debuginfo | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::server | xen-devel | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:5::server | xen-libs | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:enterprise_linux:6::client | qemu-guest-agent | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::client | qemu-img | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::client | qemu-kvm | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::client | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::client | qemu-kvm-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::computenode | qemu-guest-agent | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::computenode | qemu-img | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::computenode | qemu-kvm-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-img-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::hypervisor | qemu-kvm-rhev-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::hypervisor | rhev-hypervisor6 | 0 | 0:6.6-20150512.0.el6ev |
| Red Hat:enterprise_linux:6::server | qemu-guest-agent | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::server | qemu-img | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::server | qemu-kvm | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::server | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::server | qemu-kvm-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::workstation | qemu-guest-agent | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::workstation | qemu-img | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:6::workstation | qemu-kvm-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:enterprise_linux:7::client | libcacard | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | libcacard-devel | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | libcacard-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | qemu-img | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | qemu-kvm | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::client | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | libcacard | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | libcacard-devel | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | libcacard-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | qemu-img | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::computenode | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:enterprise_linux:7::hypervisor | rhev-hypervisor7 | 0 | 0:7.1-20150512.1.el7ev |
| Red Hat:enterprise_linux:7::server | libcacard | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | libcacard-devel | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | libcacard-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | qemu-img | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | qemu-kvm | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::server | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | libcacard | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | libcacard-devel | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | libcacard-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | qemu-img | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-common | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-debuginfo | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:enterprise_linux:7::workstation | qemu-kvm-tools | 0 | 10:1.5.3-86.el7_1.2 |
| Red Hat:openstack:4::el6 | qemu-img-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:4::el6 | qemu-kvm-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:4::el6 | qemu-kvm-rhev-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:4::el6 | qemu-kvm-rhev-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:5::el6 | qemu-img-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev-debuginfo | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:5::el6 | qemu-kvm-rhev-tools | 0 | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat:openstack:5::el7 | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:5::el7 | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | libcacard-devel-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | libcacard-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | libcacard-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | qemu-img-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | qemu-kvm-common-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | qemu-kvm-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | qemu-kvm-rhev-debuginfo | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:openstack:6::el7 | qemu-kvm-tools-rhev | 0 | 10:2.1.2-23.el7_1.3 |
| Red Hat:rhel_eus:6.5::computenode | qemu-guest-agent | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::computenode | qemu-img | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::computenode | qemu-kvm | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::computenode | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::computenode | qemu-kvm-tools | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::server | qemu-guest-agent | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::server | qemu-img | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::server | qemu-kvm | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::server | qemu-kvm-debuginfo | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_eus:6.5::server | qemu-kvm-tools | 0 | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat:rhel_virtualization:5::client | kmod-kvm | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | kmod-kvm-debug | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | kvm | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | kvm-debuginfo | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | kvm-qemu-img | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | kvm-tools | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::client | xen | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::client | xen-debuginfo | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::client | xen-devel | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::client | xen-libs | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::server | kmod-kvm | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | kmod-kvm-debug | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | kvm | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | kvm-debuginfo | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | kvm-qemu-img | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | kvm-tools | 0 | 0:83-272.el5_11 |
| Red Hat:rhel_virtualization:5::server | xen | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::server | xen-debuginfo | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::server | xen-devel | 0 | 0:3.0.3-146.el5_11 |
| Red Hat:rhel_virtualization:5::server | xen-libs | 0 | 0:3.0.3-146.el5_11 |
| SUSE:Linux Enterprise Desktop 12 | qemu | 0 | 2.0.2-46.1 |
| SUSE:Linux Enterprise Desktop 12 | xen | 0 | 4.4.2_04-18.1 |
| SUSE:Linux Enterprise Server 12 | qemu | 0 | 2.0.2-46.1 |
| SUSE:Linux Enterprise Server 12 | xen | 0 | 4.4.2_04-18.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | qemu | 0 | 2.0.2-46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 | xen | 0 | 4.4.2_04-18.1 |
| SUSE:Linux Enterprise Software Development Kit 12 | xen | 0 | 4.4.2_04-18.1 |
| Ubuntu:14.04:LTS | qemu | 0 | 2.0.0+dfsg-2ubuntu1.11 |
| Ubuntu:14.04:LTS | virtualbox | 0 | 4.3.10-dfsg-1ubuntu5 |
| Ubuntu:14.04:LTS | xen | 0 | 4.4.1-0ubuntu0.14.04.6 |
| openSUSE:Tumbleweed | qemu | 0 | 2.6.1-1.5 |
| openSUSE:Tumbleweed | virtualbox | 0 | 5.1.10-2.5 |
| openSUSE:Tumbleweed | xen | 0 | 4.7.0_12-1.3 |
Related vulnerabilities
- CVE-2024-7730 A heap buffer overflow was found in the virtio-snd device in QEMU. Also affects qemu
- CVE-2024-3447 A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. Also affects qemu
- CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter… Also affects qemu
- CVE-2024-8612 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. Also affects qemu
- CVE-2024-8354 A flaw was found in QEMU. Also affects qemu
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects qemu
- CVE-2024-6505 A flaw was found in the virtio-net device in QEMU. Also affects qemu
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects qemu