CVEブラウザに戻る

CVE-2015-8556

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1180%

EPSS Percentile34.52th

Published2017年3月24日

Last Modified2026年5月13日

Vulnerability Description

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

Affected Platforms (CPE)

📦

Qemu

Qemu

<= 2.4.1

References & Advisories

🔗 http://packetstormsecurity.com/files/134948/Gentoo-QEMU-Local-Privilege-Escalation.html

🔗 https://security.gentoo.org/glsa/201602-01

🔗 https://www.exploit-db.com/exploits/39010/

🔗 http://packetstormsecurity.com/files/134948/Gentoo-QEMU-Local-Privilege-Escalation.html

🔗 https://security.gentoo.org/glsa/201602-01

🔗 https://www.exploit-db.com/exploits/39010/

関連する脆弱性情報

CVE-2017-1684510.0

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

CVE-2021-218929.9

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0....

CVE-2020-61009.9

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted p...

CVE-2021-218899.9

A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (...