PT-2017-1611

CVE-2015-8556

Published

2015-12-21

Updated

2017-03-27

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.5.0-r1 Gentoo QEMU package before 2.5.0-r1

Description The issue is caused by synchronization errors when using a shared resource in the QEMU hardware emulator. Exploitation of this issue may allow a remote attacker to cause a denial of service or elevate privileges in the guest operating system.

Recommendations For QEMU versions prior to 2.5.0-r1, update to version 2.5.0-r1 or later to resolve the issue. For the Gentoo QEMU package before 2.5.0-r1, update to version 2.5.0-r1 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Zx2C4

Vendors

Affected products

Weakness enumeration

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

Related identifiers

CVE-2015-8556