{"api_version":"1","generated_at":"2026-07-24T19:36:32+00:00","cve":"CVE-2015-8817","urls":{"html":"https://cve.report/CVE-2015-8817","api":"https://cve.report/api/cve/CVE-2015-8817.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-8817","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-8817"},"summary":{"title":"CVE-2015-8817","description":"QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.","state":"PUBLISHED","assigner":"redhat","published_at":"2016-12-29 22:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-125","CWE-787","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300771","name":"https://bugzilla.redhat.com/show_bug.cgi?id=1300771","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"],"title":"Bug 1300771 – CVE-2015-8817 CVE-2015-8818 Qemu: OOB access in address_space_rw leads to segmentation fault","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/01/10","name":"http://www.openwall.com/lists/oss-security/2016/03/01/10","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"title":"oss-security - Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3","name":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"git.qemu.org Git - qemu.git/commit","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2705.html","name":"http://rhn.redhat.com/errata/RHSA-2016-2705.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2670.html","name":"http://rhn.redhat.com/errata/RHSA-2016-2670.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2671.html","name":"http://rhn.redhat.com/errata/RHSA-2016-2671.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html","name":"https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"title":"[Qemu-stable] [PATCH for v2.3.1] exec: Respect\tas_translate_internal len","mime":"text/x-diff","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2704.html","name":"http://rhn.redhat.com/errata/RHSA-2016-2704.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459","name":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"git.qemu.org Git - qemu.git/commit","mime":"text/xml","httpstatus":"404","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2706.html","name":"http://rhn.redhat.com/errata/RHSA-2016-2706.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2016/03/01/1","name":"http://www.openwall.com/lists/oss-security/2016/03/01/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"],"title":"oss-security - CVE request Qemu: OOB access in address_space_rw leads to segmentation\n fault","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://git.qemu.org/?p=qemu.git;a=commit;h=23820dbfc79d1c9dce090b4c555994f2bb6a69b3","name":"CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=23820dbfc79d1c9dce090b4c555994f2bb6a69b3","refsource":"MITRE","tags":[],"title":"git.qemu.org Git - qemu.git/commit","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://git.qemu.org/?p=qemu.git;a=commit;h=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459","name":"CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459","refsource":"MITRE","tags":[],"title":"git.qemu.org Git - qemu.git/commit","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:2670","name":"MISC:https://access.redhat.com/errata/RHSA-2016:2670","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:2671","name":"MISC:https://access.redhat.com/errata/RHSA-2016:2671","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:2704","name":"MISC:https://access.redhat.com/errata/RHSA-2016:2704","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:2705","name":"MISC:https://access.redhat.com/errata/RHSA-2016:2705","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/errata/RHSA-2016:2706","name":"MISC:https://access.redhat.com/errata/RHSA-2016:2706","refsource":"MITRE","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://access.redhat.com/security/cve/CVE-2015-8817","name":"MISC:https://access.redhat.com/security/cve/CVE-2015-8817","refsource":"MITRE","tags":[],"title":"CVE-2015-8817 - Red Hat Customer Portal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8817","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8817","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"1.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.0","cpe7":"rc0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"rc0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.0","cpe7":"rc5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"8817","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"qemu","cpe5":"qemu","cpe6":"2.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2015","cve_id":"8817","cve":"CVE-2015-8817","epss":"0.000880000","percentile":"0.248470000","score_date":"2026-05-11","updated_at":"2026-05-12 00:01:18"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T08:29:22.024Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"RHSA-2016:2671","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2671.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300771"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3"},{"name":"RHSA-2016:2706","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2706.html"},{"name":"[oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation fault","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2016/03/01/1"},{"name":"[oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2016/03/01/10"},{"name":"RHSA-2016:2705","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2705.html"},{"name":"[qemu-stable] 20160127 [PATCH for v2.3.1] exec: Respect as_translate_internal length clamp","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html"},{"name":"RHSA-2016:2670","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2670.html"},{"name":"RHSA-2016:2704","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2704.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-01-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-01-04T19:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"RHSA-2016:2671","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2671.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1300771"},{"tags":["x_refsource_CONFIRM"],"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3"},{"name":"RHSA-2016:2706","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2706.html"},{"name":"[oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation fault","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2016/03/01/1"},{"name":"[oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2016/03/01/10"},{"name":"RHSA-2016:2705","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2705.html"},{"name":"[qemu-stable] 20160127 [PATCH for v2.3.1] exec: Respect as_translate_internal length clamp","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html"},{"name":"RHSA-2016:2670","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2670.html"},{"name":"RHSA-2016:2704","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2016-2704.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2015-8817","datePublished":"2016-12-29T22:00:00.000Z","dateReserved":"2016-03-01T00:00:00.000Z","dateUpdated":"2024-08-06T08:29:22.024Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-12-29 22:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-125","CWE-787","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DB7A7593-FAC0-4336-84AF-EC367059D5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"1E8BE223-9122-416D-AA1D-694B19C80A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.0:rc2:*:*:*:*:*:*","matchCriteriaId":"331C6EE9-9DA2-4FE1-8446-C9CC21353332"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.0:rc3:*:*:*:*:*:*","matchCriteriaId":"383C575E-724D-4F97-9E0C-CDE50499C3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"EEC5BC38-FFBD-4484-943D-47A0AADD20B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"59FC829F-2AC7-4CB5-8F03-967906DE9028"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"EBB18C9B-B1D6-44A6-A1E9-3D258DE797B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.0:-:*:*:*:*:*:*","matchCriteriaId":"4745807B-A01D-41AE-8996-495176489A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.0:rc0:*:*:*:*:*:*","matchCriteriaId":"D583599F-AE5E-40E4-8489-62FD1D0A7845"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"DE70D9B7-F422-455F-8413-CF34342B22AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3946C39-A3D1-4E2B-9C7D-0654D9A644EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.0:rc3:*:*:*:*:*:*","matchCriteriaId":"7F858FD1-58A3-46ED-A3C6-64ECEDF8E458"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B3C61AE3-16C8-4EC6-B33D-7E331BEA8F0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A47A306F-4E42-467E-ACDA-62028DC93436"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:rc0:*:*:*:*:*:*","matchCriteriaId":"F7AE8D2A-FD6E-447F-BDC1-6CAAA0DDB9DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"8E48B585-A3E2-45FC-AA92-5DB57180B7DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"B0D54B9C-8C30-4186-A526-CE8AEE6252BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"E2F698F7-74B9-4C20-817D-1E8B92460E2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.0:rc5:*:*:*:*:*:*","matchCriteriaId":"C4B9D60F-DC78-4270-A41D-3C29FF53F4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAF4478-81BE-4891-8C13-0A8D8FEE46A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E873593D-95A1-4D69-800C-A8DB6A4C26E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9136A0D4-8334-4AC8-9267-8AC8397122CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"08AC240A-4F83-400A-9D89-B5EE4183C7E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C3461571-2158-44D9-89E5-5F8A873DEC95"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"48D79B3F-F3BD-495E-85F2-8BE40DA4D335"},{"vulnerable":true,"criteria":"cpe:2.3:a:qemu:qemu:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3982D53A-AB8A-4A68-B7FE-9179FCF1F678"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"8817","Ordinal":"1","Title":"CVE-2015-8817","CVE":"CVE-2015-8817","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"8817","Ordinal":"1","NoteData":"QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.","Type":"Description","Title":"CVE-2015-8817"},{"CveYear":"2015","CveId":"8817","Ordinal":"2","NoteData":"2016-12-29","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"8817","Ordinal":"3","NoteData":"2018-01-04","Type":"Other","Title":"Modified"}]}}}