CVE-2015-4037
First published: Tue May 19 2015(Updated: )
Qemu's user mode networking stack(SLiRP) is vulnerable to a predictable temporary file names creation flaw. It occurs when using -smb option. An unprivileged user could use this to thwart instantiation of Qemu guests, resulting in DoS. Reference: -> <a href="http://seclists.org/oss-sec/2015/q2/426">http://seclists.org/oss-sec/2015/q2/426</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QEMU qemu | <=2.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160058.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160414.html
- http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00027.html
- http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00015.html
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html
- http://www.debian.org/security/2015/dsa-3284
- http://www.debian.org/security/2015/dsa-3285
- http://www.openwall.com/lists/oss-security/2015/05/13/7
- http://www.openwall.com/lists/oss-security/2015/05/16/5
- http://www.openwall.com/lists/oss-security/2015/05/23/4
- http://www.securityfocus.com/bid/74809
- http://www.securitytracker.com/id/1032547
- http://www.ubuntu.com/usn/USN-2630-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1222892
- http://seclists.org/oss-sec/2015/q2/426
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1222894
- https://access.redhat.com/support/policy/updates/errata/
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-4037
- vendor/qemu
- canonical/qemu qemu
- version/qemu qemu/2.3.0