OR
     *cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*
     *cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*
     *cpe:2.3:a:citrix:xenserver:6.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:citrix:xenserver:6.2.0:-:*:*:*:*:*:*
     *cpe:2.3:a:citrix:xenserver:6.5:-:*:*:*:*:*:*

OR
     *cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:ltss:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*
     *cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*
     *cpe:2.3:o:suse:linux_

OR
     *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* versions up to (including) 2.3.1

NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)

NIST (AV:L/AC:L/Au:N/C:C/I:C/A:C)

NIST CWE-863

NIST CWE-284

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html No Types Assigned

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html Mailing List, Third Party Advisory

http://support.citrix.com/article/CTX201145 No Types Assigned

http://support.citrix.com/article/CTX201145 Third Party Advisory

http://www.debian.org/security/2015/dsa-3284 No Types Assigned

http://www.debian.org/security/2015/dsa-3284 Third Party Advisory

http://www.debian.org/security/2015/dsa-3286 No Types Assigned

http://www.debian.org/security/2015/dsa-3286 Third Party Advisory

http://www.securityfocus.com/bid/74949 No Types Assigned

http://www.securityfocus.com/bid/74949 Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1032467 No Types Assigned

http://www.securitytracker.com/id/1032467 Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-2630-1 No Types Assigned

http://www.ubuntu.com/usn/USN-2630-1 Third Party Advisory

http://xenbits.xen.org/xsa/advisory-131.html Vendor Advisory

http://xenbits.xen.org/xsa/advisory-131.html Third Party Advisory

https://security.gentoo.org/glsa/201604-03 No Types Assigned

https://security.gentoo.org/glsa/201604-03 Third Party Advisory

https://support.citrix.com/article/CTX206006 No Types Assigned

https://support.citrix.com/article/CTX206006 Third Party Advisory

https://support.citrix.com/article/CTX206006 [No Types Assigned]

http://www.debian.org/security/2015/dsa-3284 [No Types Assigned]

https://security.gentoo.org/glsa/201604-03 [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html [No Types Assigned]

http://www.debian.org/security/2015/dsa-3286 [No Types Assigned]

http://www.securitytracker.com/id/1032467 [No Types Assigned]

http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html [No Types Assigned]

http://support.citrix.com/article/CTX201145 [No Types Assigned]

http://www.ubuntu.com/usn/USN-2630-1 [No Types Assigned]

http://www.securityfocus.com/bid/74949 [No Types Assigned]

QEMU no restringe correctamente el acceso a escritura al espacio PCI config para ciertos dispositivos PCI pass-through, lo que podría permitir a invitados x86 HVM locales obtener privilegios, causar una denegación de servicio (caída de host), obtener información sensible o posiblemente tener otro impacto no especificado a través de vectores desconocidos.

QEMU no restringe correctamente el acceso de escritura al espacio de configuración de PCI para ciertos dispositivos 'pass-through' de PCI, lo que podría permitir a invitados de x86 HVM locales ganar privilegios, causar una denegación de servicio (caída de anfitrión), obtener información sensible o posiblemente tener otro impacto no especificado a través de vectores desconocidos.

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which mighy allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

Configuration 1
     OR
          *cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

CWE-284

http://xenbits.xen.org/xsa/advisory-131.html No Types Assigned

http://xenbits.xen.org/xsa/advisory-131.html Advisory