NVD

Id
25587  
Name
CVE-2015-4037  
Description
The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-08-26  
Modified Date
2016-12-23  
Seq
2015-4037  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135371 25587 CVE-2015-4037 FEDORA-2015-9601  View
135372 25587 CVE-2015-4037 FEDORA-2015-9599  View
135373 25587 CVE-2015-4037 SUSE-SU-2015:1152  View
135374 25587 CVE-2015-4037 SUSE-SU-2015:1519  View
135375 25587 CVE-2015-4037 openSUSE-SU-2015:1965  View
135376 25587 CVE-2015-4037 DSA-3284  View
135377 25587 CVE-2015-4037 DSA-3285  View
135378 25587 CVE-2015-4037 [oss-security] 20150513 QEMU 2.3.0 tmp vulns CVE request  View
135379 25587 CVE-2015-4037 [oss-security] 20150516 Re: QEMU 2.3.0 tmp vulns CVE request  View
135380 25587 CVE-2015-4037 [oss-security] 20150523 Re: QEMU 2.3.0 tmp vulns CVE request  View
135381 25587 CVE-2015-4037 74809  View
135382 25587 CVE-2015-4037 1032547  View
135383 25587 CVE-2015-4037 USN-2630-1  View
135384 25587 CVE-2015-4037 https://bugzilla.redhat.com/show_bug.cgi?id=1222892  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9155 JVNDB-2015-004475 QEMU の net/slirp.c の slirp_smb 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の net/slirp.c の slirp_smb 関数は、予測可能な名前で一時ファイルを作成するため、サービス運用妨害 (インスタンス障害) 状態にされる脆弱性が存在します。 CVE-2015-4037 81262 CVE-2015-4037 25587 1.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004475.html 2015-05-19 2015-08-28 View