http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=e907746266721f305d67bc0718795fedee2e824c

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10693

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html

http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html

http://marc.info/?l=bugtraq&m=143229451215900&w=2

http://marc.info/?l=bugtraq&m=143229451215900&w=2

http://marc.info/?l=bugtraq&m=143387998230996&w=2

http://rhn.redhat.com/errata/RHSA-2015-0998.html

http://rhn.redhat.com/errata/RHSA-2015-0999.html

http://rhn.redhat.com/errata/RHSA-2015-1000.html

http://rhn.redhat.com/errata/RHSA-2015-1001.html

http://rhn.redhat.com/errata/RHSA-2015-1002.html

http://rhn.redhat.com/errata/RHSA-2015-1003.html

http://rhn.redhat.com/errata/RHSA-2015-1004.html

http://rhn.redhat.com/errata/RHSA-2015-1011.html

http://support.citrix.com/article/CTX201078

http://venom.crowdstrike.com/

http://www.debian.org/security/2015/dsa-3259

http://www.debian.org/security/2015/dsa-3262

http://www.debian.org/security/2015/dsa-3274

http://www.fortiguard.com/advisory/2015-05-19-cve-2015-3456-venom-vulnerability

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

http://www.securityfocus.com/bid/74640

http://www.securitytracker.com/id/1032306

http://www.securitytracker.com/id/1032311

http://www.securitytracker.com/id/1032917

http://www.ubuntu.com/usn/USN-2608-1

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-438937.htm

http://xenbits.xen.org/xsa/advisory-133.html

https://access.redhat.com/articles/1444903

https://bto.bluecoat.com/security-advisory/sa95

https://kb.juniper.net/JSA10783

https://kc.mcafee.com/corporate/index?page=content&id=SB10118

https://security.gentoo.org/glsa/201602-01

https://security.gentoo.org/glsa/201604-03

https://security.gentoo.org/glsa/201612-27

https://securityblog.redhat.com/2015/05/13/venom-dont-get-bitten/

https://support.lenovo.com/us/en/product_security/venom

https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10

https://www.exploit-db.com/exploits/37053/

https://www.suse.com/security/cve/CVE-2015-3456.html

MITRE http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=e907746266721f305d67bc0718795fedee2e824c [No types assigned]

MITRE http://git.qemu.org/?p=qemu.git;a=commitdiff;h=e907746266721f305d67bc0718795fedee2e824c

https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10 [No Types Assigned]

https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10 [No Types Assigned]

https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10 [No Types Assigned]

OR
     *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:xen:xen:4.5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*

http://www.securitytracker.com/id/1032917 [No Types Assigned]

https://security.gentoo.org/glsa/201602-01 [No Types Assigned]

https://security.gentoo.org/glsa/201604-03 [No Types Assigned]

https://security.gentoo.org/glsa/201612-27 [No Types Assigned]

https://kb.juniper.net/JSA10783 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html [No Types Assigned]

http://rhn.redhat.com/errata/RHSA-2015-1011.html [No Types Assigned]

http://www.debian.org/security/2015/dsa-3262 [No Types Assigned]

http://www.securitytracker.com/id/1032306 [No Types Assigned]

http://www.securitytracker.com/id/1032311 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html [No Types Assigned]

https://www.exploit-db.com/exploits/37053/ [No Types Assigned]

http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html [No Types Assigned]

http://support.citrix.com/article/CTX201078 [No Types Assigned]

http://www.fortiguard.com/advisory/2015-05-19-cve-2015-3456-venom-vulnerability [No Types Assigned]

https://bto.bluecoat.com/security-advisory/sa95 [No Types Assigned]

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10693 [No Types Assigned]

http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-438937.htm [No Types Assigned]

http://marc.info/?l=bugtraq&m=143387998230996&w=2

https://support.lenovo.com/us/en/product_security/venom

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html

http://www.debian.org/security/2015/dsa-3259

http://www.ubuntu.com/usn/USN-2608-1

http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html

http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html

http://marc.info/?l=bugtraq&m=143229451215900&w=2

http://www.debian.org/security/2015/dsa-3274

http://www.securityfocus.com/bid/74640

https://kc.mcafee.com/corporate/index?page=content&id=SB10118

https://www.suse.com/security/cve/CVE-2015-3456.html

(AV:A/AC:L/Au:S/C:C/I:C/A:C)

CWE-119

Configuration 1
     OR
          *cpe:2.3:a:qemu:qemu:2.3.0:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:xen:xen:4.5.0:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:*
          *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:red

Though the VENOM vulnerability is also agnostic of the guest operating system, an attacker (or an attacker’s malware) would need to have administrative or root privileges in the guest operating system in order to exploit VENOM