7.2

CVE-2012-3515

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Version < 1.2.0
Xen ≫ Xen Version4.0.0
Xen ≫ Xen Version4.1.0
Opensuse ≫ Opensuse Version11.4
Opensuse ≫ Opensuse Version12.1
Opensuse ≫ Opensuse Version12.2
Suse ≫ Linux Enterprise Desktop Version10 Updatesp4
Suse ≫ Linux Enterprise Desktop Version11 Updatesp2
Suse ≫ Linux Enterprise Server Version10 Updatesp2
Suse ≫ Linux Enterprise Server Version10 Updatesp3 SwEditionltss
Suse ≫ Linux Enterprise Server Version10 Updatesp4
Suse ≫ Linux Enterprise Server Version11 Updatesp1 SwEditionltss
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatform-
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwPlatformvmware
Redhat ≫ Virtualization Version3.0
   Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Virtualization Version5.0
Redhat ≫ Virtualization Version6.0
Redhat ≫ Enterprise Linux Eus Version6.3
Debian ≫ Debian Linux Version6.0
Debian ≫ Debian Linux Version7.0
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version11.04
Canonical ≫ Ubuntu Linux Version11.10
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.404
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/51413
Third Party Advisory
http://secunia.com/advisories/55082
Third Party Advisory
http://security.gentoo.org/glsa/glsa-201309-24.xml
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/50913
Third Party Advisory
http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/50689
Third Party Advisory
http://www.debian.org/security/2012/dsa-2545
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1262.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1325.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/201604-03
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/50472
Third Party Advisory
http://secunia.com/advisories/50530
Third Party Advisory
http://support.citrix.com/article/CTX134708
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html
Third Party Advisory
Mailing List
http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html
Vendor Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2012-1233.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1234.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1235.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-1236.html
Third Party Advisory
http://secunia.com/advisories/50528
Third Party Advisory
http://secunia.com/advisories/50632
Third Party Advisory
http://secunia.com/advisories/50860
Third Party Advisory
http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability
Vendor Advisory
http://www.debian.org/security/2012/dsa-2543
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/09/05/10
Third Party Advisory
Mailing List
Mitigation
http://www.securityfocus.com/bid/55413
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1590-1
Third Party Advisory