CVE-2015-3456
Fixed in a distro release EPSS 15%
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
Products: qemu, redhat enterprise_virtualization, redhat openstack, redhat enterprise_linux, xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:2.3+dfsg-3 |
| Debian 12 | xen | 4.4.0-1 |
| Debian 13 | qemu | 1:2.3+dfsg-3 |
| Debian 13 | xen | 4.4.0-1 |
| Debian 14 | qemu | 1:2.3+dfsg-3 |
| Debian 14 | xen | 4.4.0-1 |
| Debian 6.0 | qemu | 0.12.5+dfsg-3squeeze5 |
| Debian 6.0 | qemu-kvm | 0.12.5+dfsg-5+squeeze12 |
| Debian 6.0 | virtualbox-ose | 3.2.10-dfsg-1+squeeze4 |
| Debian 7 | virtualbox | 4.1.18-dfsg-2+deb7u5 |
| Debian 7 | xen | 4.1.4-3+deb7u6 |
| Debian 8 | qemu | 1:2.1+dfsg-12 |
| Debian 8 | virtualbox | 4.3.18-dfsg-3+deb8u2 |
| Red Hat Enterprise Linux 5 | xen | 0:3.0.3-146.el5_11 |
| Red Hat Enterprise Linux 5 | xen-debuginfo | 0:3.0.3-146.el5_11 |
| Red Hat Enterprise Linux 5 | xen-libs | 0:3.0.3-146.el5_11 |
| Red Hat Enterprise Linux 6 | qemu-guest-agent | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-img | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-img-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm-debuginfo | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev-debuginfo | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm-rhev-tools | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | qemu-kvm-tools | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.6-20150512.0.el6ev |
| Red Hat Enterprise Linux 7 | libcacard | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | libcacard-devel | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | libcacard-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | libcacard-tools | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | qemu-img | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | qemu-img-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | qemu-kvm | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | qemu-kvm-debuginfo | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools | 10:1.5.3-86.el7_1.2 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat Enterprise Linux 7 | rhev-hypervisor7 | 0:7.1-20150512.1.el7ev |
| Red Hat openstack 4 | qemu-img-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 4 | qemu-kvm-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 4 | qemu-kvm-rhev-debuginfo | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 4 | qemu-kvm-rhev-tools | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 5 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | libcacard-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | qemu-img-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | qemu-img-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 5 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | qemu-kvm-rhev | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 5 | qemu-kvm-rhev-debuginfo | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 5 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 5 | qemu-kvm-rhev-tools | 2:0.12.1.2-2.448.el6_6.3 |
| Red Hat openstack 5 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | libcacard-devel-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | libcacard-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | libcacard-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | qemu-img-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | qemu-kvm-common-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | qemu-kvm-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | qemu-kvm-rhev-debuginfo | 10:2.1.2-23.el7_1.3 |
| Red Hat openstack 6 | qemu-kvm-tools-rhev | 10:2.1.2-23.el7_1.3 |
| Red Hat rhel eus 6.5 | qemu-guest-agent | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat rhel eus 6.5 | qemu-img | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat rhel eus 6.5 | qemu-kvm | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat rhel eus 6.5 | qemu-kvm-debuginfo | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat rhel eus 6.5 | qemu-kvm-tools | 2:0.12.1.2-2.415.el6_5.15 |
| Red Hat rhel virtualization 5 | kmod-kvm | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | kmod-kvm-debug | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | kvm | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | kvm-debuginfo | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | kvm-qemu-img | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | kvm-tools | 0:83-272.el5_11 |
| Red Hat rhel virtualization 5 | xen | 0:3.0.3-146.el5_11 |
| Red Hat rhel virtualization 5 | xen-debuginfo | 0:3.0.3-146.el5_11 |
| Red Hat rhel virtualization 5 | xen-devel | 0:3.0.3-146.el5_11 |
| SUSE Linux Enterprise Desktop 12 | qemu | 2.0.2-46.1 |
| SUSE Linux Enterprise Desktop 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Server 12 | qemu | 2.0.2-46.1 |
| SUSE Linux Enterprise Server 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | qemu | 2.0.2-46.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | xen | 4.4.2_04-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 | xen | 4.4.2_04-18.1 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.11 |
| Ubuntu 14.04 LTS | virtualbox | 4.3.10-dfsg-1ubuntu5 |
| Ubuntu 14.04 LTS | xen | 4.4.1-0ubuntu0.14.04.6 |
| openSUSE Tumbleweed | qemu | 2.6.1-1.5 |
| openSUSE Tumbleweed | virtualbox | 5.1.10-2.5 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |