CVE-2012-3515
- State
- Published
- Severity
- Not scored
- Published
- Nov 23, 2012
- Updated
- Aug 6, 2024
- Reserved
- Jun 14, 2012
Description
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 55082third-party-advisory
- 50528third-party-advisory
- RHSA-2012:1234vendor-advisory
- 50530third-party-advisory
- http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log
- 51413third-party-advisory
- GLSA-201309-24vendor-advisory
- 50689third-party-advisory
- DSA-2543vendor-advisory
- SUSE-SU-2012:1135vendor-advisory
- 50632third-party-advisory
- RHSA-2012:1325vendor-advisory
- RHSA-2012:1236vendor-advisory
- SUSE-SU-2012:1205vendor-advisory
- SUSE-SU-2012:1202vendor-advisory
- 50913third-party-advisory
- openSUSE-SU-2012:1572vendor-advisory
- 50472third-party-advisory
- openSUSE-SU-2012:1170vendor-advisory
- USN-1590-1vendor-advisory
- RHSA-2012:1262vendor-advisory
- openSUSE-SU-2012:1153vendor-advisory
- http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability
- SUSE-SU-2012:1203vendor-advisory
- 55413vdb-entry
- SUSE-SU-2012:1162vendor-advisory
- openSUSE-SU-2012:1174vendor-advisory
- SUSE-SU-2012:1320vendor-advisory
- GLSA-201604-03vendor-advisory
- RHSA-2012:1233vendor-advisory
- SUSE-SU-2012:1132vendor-advisory
- http://support.citrix.com/article/CTX134708
- DSA-2545vendor-advisory
- SUSE-SU-2012:1129vendor-advisory
- [Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerabilitymailing-list
- SUSE-SU-2012:1133vendor-advisory
- RHSA-2012:1235vendor-advisory
- openSUSE-SU-2012:1573vendor-advisory
- [oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerabilitymailing-list
- openSUSE-SU-2012:1172vendor-advisory
- 50860third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.