NetSight
IP …
medium4.6

CVE-2015-4106

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privi…

Impact

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

Affected products

VendorProductAffected versions
QemuQemu
through 2.3.1
DebianDebian Linux
Versions 7.0, 8.0
FedoraprojectFedora
Versions 20, 21, 22
SuseLinux Enterprise Desktop
Versions 11, 12
SuseLinux Enterprise Server
Versions 11, 12
SuseLinux Enterprise Software Development Kit
Versions 11, 12
CitrixXenserver
Versions 6.0, 6.0.2, 6.1.0, 6.2.0, 6.5
CanonicalUbuntu Linux
Versions 12.04, 14.04, 14.10, 15.04

Weakness classification

CWE-863

References