CVE-2015-8817
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 6, 2024
- Reserved
- Mar 1, 2016
Description
QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2016:2671vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1300771
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3
- RHSA-2016:2706vendor-advisory
- [oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation faultmailing-list
- [oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation faultmailing-list
- RHSA-2016:2705vendor-advisory
- [qemu-stable] 20160127 [PATCH for v2.3.1] exec: Respect as_translate_internal length clampmailing-list
- RHSA-2016:2670vendor-advisory
- RHSA-2016:2704vendor-advisory
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.