2017-10-16 12:31:07 -04:00
{
2019-03-18 00:13:56 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2012-3515" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-18 00:13:56 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model's address space.\""
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "55082" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/55082"
} ,
{
"name" : "50528" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50528"
} ,
{
"name" : "RHSA-2012:1234" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
} ,
{
"name" : "50530" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50530"
} ,
{
"name" : "http://git.qemu.org/?p=qemu-stable-0.15.git;a=log" ,
"refsource" : "CONFIRM" ,
"url" : "http://git.qemu.org/?p=qemu-stable-0.15.git;a=log"
} ,
{
"name" : "51413" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/51413"
} ,
{
"name" : "GLSA-201309-24" ,
"refsource" : "GENTOO" ,
"url" : "http://security.gentoo.org/glsa/glsa-201309-24.xml"
} ,
{
"name" : "50689" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50689"
} ,
{
"name" : "DSA-2543" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2012/dsa-2543"
} ,
{
"name" : "SUSE-SU-2012:1135" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
} ,
{
"name" : "50632" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50632"
} ,
{
"name" : "RHSA-2012:1325" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
} ,
{
"name" : "RHSA-2012:1236" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
} ,
{
"name" : "SUSE-SU-2012:1205" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
} ,
{
"name" : "SUSE-SU-2012:1202" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
} ,
{
"name" : "50913" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50913"
} ,
{
"name" : "openSUSE-SU-2012:1572" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
} ,
{
"name" : "50472" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50472"
} ,
{
"name" : "openSUSE-SU-2012:1170" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
} ,
{
"name" : "USN-1590-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-1590-1"
} ,
{
"name" : "RHSA-2012:1262" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
} ,
{
"name" : "openSUSE-SU-2012:1153" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
} ,
{
"name" : "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability" ,
"refsource" : "CONFIRM" ,
"url" : "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
} ,
{
"name" : "SUSE-SU-2012:1203" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
} ,
{
"name" : "55413" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/55413"
} ,
{
"name" : "SUSE-SU-2012:1162" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
} ,
{
"name" : "openSUSE-SU-2012:1174" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
} ,
{
"name" : "SUSE-SU-2012:1320" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
} ,
{
"name" : "GLSA-201604-03" ,
"refsource" : "GENTOO" ,
"url" : "https://security.gentoo.org/glsa/201604-03"
} ,
{
"name" : "RHSA-2012:1233" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
} ,
{
"name" : "SUSE-SU-2012:1132" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
} ,
{
"name" : "http://support.citrix.com/article/CTX134708" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.citrix.com/article/CTX134708"
} ,
{
"name" : "DSA-2545" ,
"refsource" : "DEBIAN" ,
"url" : "http://www.debian.org/security/2012/dsa-2545"
} ,
{
"name" : "SUSE-SU-2012:1129" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
} ,
{
"name" : "[Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability" ,
"refsource" : "MLIST" ,
"url" : "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
} ,
{
"name" : "SUSE-SU-2012:1133" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
} ,
{
"name" : "RHSA-2012:1235" ,
"refsource" : "REDHAT" ,
"url" : "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
} ,
{
"name" : "openSUSE-SU-2012:1573" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
} ,
{
"name" : "[oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2012/09/05/10"
} ,
{
"name" : "openSUSE-SU-2012:1172" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
} ,
{
"name" : "50860" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/50860"
}
]
}
}