CVE-2015-8818
published 2016-12-29CVE-2015-8818: The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.41%
33.3th percentile
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | qemu | < qemu 1:2.4+dfsg-1a (bookworm) | qemu 1:2.4+dfsg-1a (bookworm) |
| qemu | qemu | <= 2.3.1 | — |
| qemu | qemu | >= 0 < 1:2.4+dfsg-1a | 1:2.4+dfsg-1a |
| qemu | qemu | >= 0 < 1:2.4+dfsg-1a | 1:2.4+dfsg-1a |
| qemu | qemu | >= 0 < 1:2.4+dfsg-1a | 1:2.4+dfsg-1a |
| qemu | qemu | >= 0 < 1:2.4+dfsg-1a | 1:2.4+dfsg-1a |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Qemu: OOB access in address_space_rw leads to segmentation fault
vendor_redhat·2016-01-27·CVSS 5.5
CVE-2015-8818 [MEDIUM] CWE-787 Qemu: OOB access in address_space_rw leads to segmentation fault
Qemu: OOB access in address_space_rw leads to segmentation fault
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).
Package: kvm (Red Hat Enterprise Linux 5) - Not affected
Package: qemu-kvm (Red Hat Enterprise Linux 6) - Not affected
Package: qemu-kvm-rhev
Debian
CVE-2015-8818: qemu - The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick...
vendor_debian·2015·CVSS 5.5
CVE-2015-8818 [MEDIUM] CVE-2015-8818: qemu - The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick...
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
Scope: local
bookworm: resolved (fixed in 1:2.4+dfsg-1a)
bullseye: resolved (fixed in 1:2.4+dfsg-1a)
forky: resolved (fixed in 1:2.4+dfsg-1a)
sid: resolved (fixed in 1:2.4+dfsg-1a)
trixie: resolved (fixed in 1:2.4+dfsg-1a)
GHSA
GHSA-v5jw-2c5m-f8hv: The cpu_physical_memory_write_rom_internal function in exec
ghsa_unreviewed·2022-05-13
CVE-2015-8818 [MEDIUM] GHSA-v5jw-2c5m-f8hv: The cpu_physical_memory_write_rom_internal function in exec
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
OSV
CVE-2015-8818: The cpu_physical_memory_write_rom_internal function in exec
osv·2016-12-29·CVSS 5.5
CVE-2015-8818 [MEDIUM] CVE-2015-8818: The cpu_physical_memory_write_rom_internal function in exec
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63http://rhn.redhat.com/errata/RHSA-2016-2670.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2671.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2704.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2705.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2706.htmlhttp://www.openwall.com/lists/oss-security/2016/03/01/1http://www.openwall.com/lists/oss-security/2016/03/01/10https://bugzilla.redhat.com/show_bug.cgi?id=1300771http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63http://rhn.redhat.com/errata/RHSA-2016-2670.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2671.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2704.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2705.htmlhttp://rhn.redhat.com/errata/RHSA-2016-2706.htmlhttp://www.openwall.com/lists/oss-security/2016/03/01/1http://www.openwall.com/lists/oss-security/2016/03/01/10https://bugzilla.redhat.com/show_bug.cgi?id=1300771
2016-12-29
Published