CVE-2015-8556

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

Metrics

CVSS 3.0 10.0/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/134948/Gentoo-QEMU-Local-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201602-01Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39010/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/134948/Gentoo-QEMU-Local-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201602-01Exploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/39010/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-85579.0The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrar CVE-2015-85585.5The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop CVE-2015-85597.5The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.CVE-2015-85607.3Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x a CVE-2015-85616.8The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or CVE-2015-85627.5Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via t CVE-2015-85636.8Cross-site request forgery (CSRF) vulnerability in the com_templates component in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows CVE-2015-85647.5Directory traversal vulnerability in Joomla! 3.4.x before 3.4.6 allows remote attackers to have unspecified impact via directory traversal s CVE-2015-85657.5Directory traversal vulnerability in Joomla! 3.2.0 through 3.3.x and 3.4.x before 3.4.6 allows remote attackers to have unspecified impact v CVE-2015-85667.5The Session package 1.x before 1.3.1 for Joomla! Framework allows remote attackers to execute arbitrary code via unspecified session values.CVE-2015-85677.7Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).CVE-2015-85686.5Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of servic