← Back

CVE-2015-8817

nvd nist
Published: Dec 29, 2016Modified: May 6, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.

Affected (26)

Products: Qemu: Qemu
Qemu
1 product
Qemu
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Qemu
Qemu
Version 1.6.0
Qemu
Version 1.6.0 rc1
Qemu
Version 1.6.0 rc2
Qemu
Version 1.6.0 rc3
Qemu
Version 1.6.1
Qemu
Version 1.6.2
Qemu
Version 1.7.1
Qemu
Version 2.0.0
Qemu
Version 2.0.0 rc0
Qemu
Version 2.0.0 rc1
Qemu
Version 2.0.0 rc2
Qemu
Version 2.0.0 rc3
Qemu
Version 2.0.2
Qemu
Version 2.1.0
Qemu
Version 2.1.0 rc0
Qemu
Version 2.1.0 rc1
Qemu
Version 2.1.0 rc2
Qemu
Version 2.1.0 rc3
Qemu
Version 2.1.0 rc5
Qemu
Version 2.1.1
Qemu
Version 2.1.2
Qemu
Version 2.1.3
Qemu
Version 2.2.0
Qemu
Version 2.2.1
Qemu
Version 2.3.0
Qemu
Version 2.3.1

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (22)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Mailing ListPatch
Source: secalert@redhat.com
Mailing ListPatch
Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List

Timeline

No history available yet.