Vulnerability Database

296,772

Total vulnerabilities in the database

CVE-2015-5745

Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.

  • Published: Jan 23, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-5745
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

Software From Fixed in
qemu / qemu - 2.4.0
fedoraproject / fedora 22 22.x
fedoraproject / fedora 23 23.x
fedoraproject / fedora 21 21.x
arista / eos 4.15 4.15.x
arista / eos 4.14 4.14.x
arista / eos 4.13 4.13.x
arista / eos 4.12 4.12.x