CVE-2012-3515
HIGH severity · CVSS 7.2 · Improper input validation
7.2CVSS HIGH
Summary
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)1%
AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected products we track (2)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.htmlAdvisory
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.htmlAdvisory