Rapid7 Vulnerability & Exploit Database

Ubuntu: (Multiple Advisories) (CVE-2015-8550): QEMU vulnerabilities

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Ubuntu: (Multiple Advisories) (CVE-2015-8550): QEMU vulnerabilities

Severity
6
CVSS
(AV:L/AC:L/Au:S/C:P/I:P/A:C)
Published
02/03/2016
Created
07/25/2018
Added
02/03/2016
Modified
06/29/2020

Description

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.

Solution(s)

  • ubuntu-upgrade-linux-image-3-13-0-74-generic
  • ubuntu-upgrade-linux-image-3-13-0-74-generic-lpae
  • ubuntu-upgrade-linux-image-3-13-0-74-lowlatency
  • ubuntu-upgrade-linux-image-3-13-0-74-powerpc-e500
  • ubuntu-upgrade-linux-image-3-13-0-74-powerpc-e500mc
  • ubuntu-upgrade-linux-image-3-13-0-74-powerpc-smp
  • ubuntu-upgrade-linux-image-3-13-0-74-powerpc64-emb
  • ubuntu-upgrade-linux-image-3-13-0-74-powerpc64-smp
  • ubuntu-upgrade-linux-image-3-16-0-57-generic
  • ubuntu-upgrade-linux-image-3-16-0-57-generic-lpae
  • ubuntu-upgrade-linux-image-3-16-0-57-lowlatency
  • ubuntu-upgrade-linux-image-3-16-0-57-powerpc-e500mc
  • ubuntu-upgrade-linux-image-3-16-0-57-powerpc-smp
  • ubuntu-upgrade-linux-image-3-16-0-57-powerpc64-emb
  • ubuntu-upgrade-linux-image-3-16-0-57-powerpc64-smp
  • ubuntu-upgrade-linux-image-3-19-0-42-generic
  • ubuntu-upgrade-linux-image-3-19-0-42-generic-lpae
  • ubuntu-upgrade-linux-image-3-19-0-42-lowlatency
  • ubuntu-upgrade-linux-image-3-19-0-42-powerpc-e500mc
  • ubuntu-upgrade-linux-image-3-19-0-42-powerpc-smp
  • ubuntu-upgrade-linux-image-3-19-0-42-powerpc64-emb
  • ubuntu-upgrade-linux-image-3-19-0-42-powerpc64-smp
  • ubuntu-upgrade-linux-image-3-2-0-1476-omap4
  • ubuntu-upgrade-linux-image-3-2-0-97-generic
  • ubuntu-upgrade-linux-image-3-2-0-97-generic-pae
  • ubuntu-upgrade-linux-image-3-2-0-97-highbank
  • ubuntu-upgrade-linux-image-3-2-0-97-omap
  • ubuntu-upgrade-linux-image-3-2-0-97-powerpc-smp
  • ubuntu-upgrade-linux-image-3-2-0-97-powerpc64-smp
  • ubuntu-upgrade-linux-image-3-2-0-97-virtual
  • ubuntu-upgrade-linux-image-4-2-0-22-generic
  • ubuntu-upgrade-linux-image-4-2-0-22-generic-lpae
  • ubuntu-upgrade-linux-image-4-2-0-22-lowlatency
  • ubuntu-upgrade-linux-image-4-2-0-22-powerpc-e500mc
  • ubuntu-upgrade-linux-image-4-2-0-22-powerpc-smp
  • ubuntu-upgrade-linux-image-4-2-0-22-powerpc64-emb
  • ubuntu-upgrade-linux-image-4-2-0-22-powerpc64-smp
  • ubuntu-upgrade-qemu-kvm
  • ubuntu-upgrade-qemu-system
  • ubuntu-upgrade-qemu-system-aarch64
  • ubuntu-upgrade-qemu-system-arm
  • ubuntu-upgrade-qemu-system-mips
  • ubuntu-upgrade-qemu-system-misc
  • ubuntu-upgrade-qemu-system-ppc
  • ubuntu-upgrade-qemu-system-sparc
  • ubuntu-upgrade-qemu-system-x86

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;