CVE-2014-3615: The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution

Unscored severity · published Nov 1, 2014

CVE-2014-3615

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution

–

CVSS

0.4%

EPSS

On KEV

Description

The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 39% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Debian Linux · Debian

7.0 · source: NVD

Enterprise Linux Desktop · Redhat

7.0 · source: NVD

Enterprise Linux Eus · Redhat

7.3; 7.4; 7.5; 7.6; 7.7 · source: NVD

Enterprise Linux Server · Redhat

7.0 · source: NVD

Enterprise Linux Server Aus · Redhat

7.3; 7.4; 7.6; 7.7 · source: NVD

Enterprise Linux Server Tus · Redhat

7.3; 7.6; 7.7 · source: NVD

Enterprise Linux Workstation · Redhat

7.0 · source: NVD

Openstack · Redhat

5.0 · source: NVD

Opensuse · Opensuse

13.1 · source: NVD

Qemu · Qemu

through 2.1.3 · source: NVD

Ubuntu Linux · Canonical

10.04; 12.04; 14.04; 14.10 · source: NVD

Virtualization · Redhat

3.0 · source: NVD

Affected product

Ubuntu Linux

Canonical

All Ubuntu Linux CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2014-3615

CVE.org

https://www.cve.org/CVERecord?id=CVE-2014-3615

git.qemu.org

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ab9509cceabef28071e41bdfa073083859c949a7

git.qemu.org

http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=c1b886c45dc70f247300f549dce9833f3fa2def5

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1669.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1670.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2014-1941.html