CVE-2015-3456

QEMU - DoS

Title source: llm

Description

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.

Exploits (3)

exploitdb WORKING POC
by Marcus Meissner · cdosmultiple
https://www.exploit-db.com/exploits/37053
nomisec WORKING POC 12 stars
by vincentbernat · poc
https://github.com/vincentbernat/cve-2015-3456
nomisec WORKING POC
by orf53975 · poc
https://github.com/orf53975/poisonfrog

Scores

EPSS 0.3226
EPSS Percentile 96.9%

Details

CWE
CWE-119
Status published
Products (10)
qemu/qemu < 2.3.0
redhat/enterprise_linux 5
redhat/enterprise_linux 6.0
redhat/enterprise_linux 7.0
redhat/enterprise_virtualization 3.0
redhat/openstack 4.0
redhat/openstack 5.0
redhat/openstack 6.0
redhat/openstack 7.0
xen/xen 4.5.0
Published May 13, 2015
Tracked Since Feb 18, 2026