CVE-2015-8619

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2016/dsa-3471Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/23/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/79668Third Party Advisory, VDB Entry
https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.htmlMailing List, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201604-01Third Party Advisory
http://www.debian.org/security/2016/dsa-3471Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/12/23/1Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/79668Third Party Advisory, VDB Entry
https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.htmlMailing List, Patch, Third Party Advisory
https://security.gentoo.org/glsa/201604-01Third Party Advisory

Timeline

Published: Apr 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-86207.8Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Anti CVE-2015-86215.5t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally.CVE-2015-86226.1Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, CVE-2015-86238.8The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x before 1.24.5 does not perform token compariso CVE-2015-86248.8The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x b CVE-2015-86257.5MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when call CVE-2015-86269.8The User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 generate CVE-2015-86275.3MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses contai CVE-2015-86285.3The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaW CVE-2015-86295.3The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does CVE-2015-86307.5The (1) kadm5_create_principal_3 and (2) kadm5_modify_principal functions in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka CVE-2015-86316.5Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow r