DEBIAN-CVE-2015-3456

Advisory lineage Upstream: 1 Downstream: 6
Upstream
CVE-2015-3456
Published: 13 May 2015, 18:59
Last modified:28 Apr 2026, 20:14

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 May 2015, 18:59
Published
Vulnerability first disclosed
28 Apr 2026, 20:14
Last Modified
Vulnerability information updated

Description

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.

Affected Systems

  • debian•qemu

    < 1:2.3+dfsg-3 | < 1:2.3+dfsg-3 | < 1:2.3+dfsg-3 | < 1:2.3+dfsg-3

  • debian•xen

    < 4.4.0-1 | < 4.4.0-1 | < 4.4.0-1 | < 4.4.0-1

References (1)