CVE-2015-7549: Null Pointer Dereference
Last updated 24 July 2024
Other sources
Qemu emulator built with the PCI MSI-X support is vulnerable to null pointer dereference issue. It occurs when the controller attempts to write to the pending bit array(PBA) memory region. Because the MSI-X MMIO support did not define the .write method.
A privileges used inside guest could use this flaw to crash the Qemu process resulting in DoS issue.
Upstream fix: ------------- -> http://git.qemu.org/?p=qemu.git;a=commit;h=43b11a91dd861a946b231b89b754285
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/12/14/2
— Red Hat
The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7549?
The severity of CVE-2015-7549 is low.
How does CVE-2015-7549 impact QEMU?
CVE-2015-7549 allows local guest OS privileged users to cause a denial of service by leveraging failure to define the .write method.
Which versions of QEMU are affected by CVE-2015-7549?
QEMU versions up to exclusive 2.0.0+dfsg-2ubuntu1.22 and 1:2.3+dfsg-5ubuntu9.2 are affected by CVE-2015-7549.
How can I fix CVE-2015-7549 in QEMU on Ubuntu?
To fix CVE-2015-7549 in QEMU on Ubuntu, update to version 2.0.0+dfsg-2ubuntu1.22 or 1:2.3+dfsg-5ubuntu9.2.
Where can I find more information about CVE-2015-7549?
You can find more information about CVE-2015-7549 on the following references: http://www.securityfocus.com/bid/80761, http://www.debian.org/security/2016/dsa-3471, http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.html