CVE

Id
86020  
CVE No.
CVE-2015-8743  
Status
Candidate  
Description
QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing "ioport" r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.  
Phase
Assigned (20160104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
756594 86020 CVE-2015-8743 MLIST:[oss-security] 20160104 CVE request Qemu: net: ne2000: OOB r/w in ioport operations  View
756595 86020 CVE-2015-8743 URL:http://www.openwall.com/lists/oss-security/2016/01/04/1  View
756596 86020 CVE-2015-8743 MLIST:[oss-security] 20160104 Re: CVE request Qemu: net: ne2000: OOB r/w in ioport operations  View
756597 86020 CVE-2015-8743 URL:http://www.openwall.com/lists/oss-security/2016/01/04/2  View
756598 86020 CVE-2015-8743 MLIST:[qemu-devel] 20160104 Re: [PATCH v3] net: ne2000: fix bounds check in ioport operations  View
756599 86020 CVE-2015-8743 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html  View
756600 86020 CVE-2015-8743 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1264929  View
756601 86020 CVE-2015-8743 BID:79820  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11561 JVNDB-2015-006881 Apache Solr の Admin UI におけるクロスサイトスクリプティングの脆弱性 Apache Solr の Admin UI には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-8795 86020 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006881.html  View