CVE-2014-3615 — Sensitive Information Exposure in Qemu

CWE-200 — Sensitive Information Exposure10 documents8 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 74.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
QemuCanonical Ubuntu LinuxDebian Linux+9 more
Timeline
PublishedNov 1
Latest updateMay 13

Description

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages9 packages

▶Debianqemu/qemu< 2.1+dfsg-5+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.7
▶NVDqemu/qemu2.1.3

Also affects: Debian Linux 7.0, Ubuntu Linux 10.04, 12.04, 14.04, 14.10, Enterprise Linux 7.3, 7.4, 7.5, 7.6, 7.7

Patches

Patch: bugzilla.redhat.com ↗Patch: bugzilla.redhat.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-g423-f8gf-9qh3: The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution↗2022-05-13
▶
OSV
qemu, qemu-kvm vulnerabilities↗2014-11-13
▶
CVEList
CVE-2014-3615: The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution↗2014-11-01
▶
OSV
CVE-2014-3615: The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution↗2014-11-01
▶

📋Vendor Advisories

3
Ubuntu
QEMU vulnerabilities↗2014-11-13
▶
Red Hat
Qemu: information leakage when guest sets high resolution↗2014-09-05
▶
Debian
CVE-2014-3615: qemu - The VGA emulator in QEMU allows local guest users to read host memory by setting...↗2014
▶

💬Community

2
Bugzilla
CVE-2014-3615 Qemu: crash when guest sets high resolution [fedora-all]↗2014-09-08
▶
Bugzilla
CVE-2014-3615 Qemu: information leakage when guest sets high resolution↗2014-09-08
▶
CVE-2014-3615 — Sensitive Information Exposure in Qemu | cvebase