Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-3515

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Published

2012-11-23T20:55:03.523

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	qemu	qemu	< 1.2.0	Yes
Operating System	xen	xen	4.0.0	Yes
Operating System	xen	xen	4.1.0	Yes
Operating System	opensuse	opensuse	11.4	Yes
Operating System	opensuse	opensuse	12.1	Yes
Operating System	opensuse	opensuse	12.2	Yes
Operating System	suse	linux_enterprise_desktop	10	Yes
Operating System	suse	linux_enterprise_desktop	11	Yes
Operating System	suse	linux_enterprise_server	10	Yes
Operating System	suse	linux_enterprise_server	10	Yes
Operating System	suse	linux_enterprise_server	10	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_server	11	Yes
Operating System	suse	linux_enterprise_software_development_kit	10	Yes
Operating System	suse	linux_enterprise_software_development_kit	11	Yes
Application	redhat	virtualization	3.0	Yes
Operating System	redhat	enterprise_linux	6.0	No
Application	redhat	virtualization	5.0	Yes
Application	redhat	virtualization	6.0	Yes
Operating System	redhat	enterprise_linux_desktop	5.0	Yes
Operating System	redhat	enterprise_linux_desktop	6.0	Yes
Operating System	redhat	enterprise_linux_eus	6.3	Yes
Operating System	redhat	enterprise_linux_server	5.0	Yes
Operating System	redhat	enterprise_linux_server	6.0	Yes
Operating System	redhat	enterprise_linux_workstation	5.0	Yes
Operating System	redhat	enterprise_linux_workstation	6.0	Yes
Operating System	debian	debian_linux	6.0	Yes
Operating System	debian	debian_linux	7.0	Yes
Operating System	canonical	ubuntu_linux	10.04	Yes
Operating System	canonical	ubuntu_linux	11.04	Yes
Operating System	canonical	ubuntu_linux	11.10	Yes
Operating System	canonical	ubuntu_linux	12.04	Yes

References

http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html Mailing List, Third Party Advisory ([email protected])
http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html Mailing List, Vendor Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1233.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1234.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1235.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1236.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1262.html Third Party Advisory ([email protected])
http://rhn.redhat.com/errata/RHSA-2012-1325.html Third Party Advisory ([email protected])
http://secunia.com/advisories/50472 Third Party Advisory ([email protected])
http://secunia.com/advisories/50528 Third Party Advisory ([email protected])
http://secunia.com/advisories/50530 Third Party Advisory ([email protected])
http://secunia.com/advisories/50632 Third Party Advisory ([email protected])
http://secunia.com/advisories/50689 Third Party Advisory ([email protected])
http://secunia.com/advisories/50860 Third Party Advisory ([email protected])
http://secunia.com/advisories/50913 Third Party Advisory ([email protected])
http://secunia.com/advisories/51413 Third Party Advisory ([email protected])
http://secunia.com/advisories/55082 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory ([email protected])
http://support.citrix.com/article/CTX134708 Third Party Advisory ([email protected])
http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability Vendor Advisory ([email protected])
http://www.debian.org/security/2012/dsa-2543 Third Party Advisory ([email protected])
http://www.debian.org/security/2012/dsa-2545 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2012/09/05/10 Mailing List, Mitigation, Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/55413 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1590-1 Third Party Advisory ([email protected])
https://security.gentoo.org/glsa/201604-03 Third Party Advisory ([email protected])
http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1233.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1234.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1235.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1236.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1262.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2012-1325.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50472 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50528 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50530 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50632 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50689 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50860 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/50913 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/51413 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/55082 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-201309-24.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.citrix.com/article/CTX134708 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2012/dsa-2543 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2012/dsa-2545 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.openwall.com/lists/oss-security/2012/09/05/10 Mailing List, Mitigation, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/55413 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1590-1 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/201604-03 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)