[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-2545-1 qemu -- multiple

ID: oval:org.secpod.oval:def:600883Date: (C)2012-09-13   (M)2023-02-20
Class: PATCHFamily: unix




Multiple vulnerabilities have been discovered in qemu, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2012-2652: The snapshot mode of QEMU incorrectly handles temporary files used to store the current state, making it vulnerable to symlink attacks due to a race condition. CVE-2012-3515: QEMU does not properly handle VT100 escape sequences when emulating certain devices with a virtual console backend. An attacker within a guest with access to the vulnerable virtual console could overwrite memory of QEMU and escalate privileges to that of the qemu process.

Platform:
Debian 6.0
Product:
qemu
Reference:
DSA-2545-1
CVE-2012-2652
CVE-2012-3515
CVE    2
CVE-2012-2652
CVE-2012-3515
CPE    4
cpe:/a:qemu:qemu:-
cpe:/a:qemu:qemu
cpe:/a:qemu:qemu:1.0
cpe:/o:debian:debian_linux:6.0
...

© SecPod Technologies