{"id":"CVE-2015-3456","url":"https://www.cyber-defence.io/tools/cve/CVE-2015-3456","generatedAt":"2026-11-05T06:19:57.985Z","title":"The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2)…","description":"The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.","published":"2015-05-13T18:59:00.000Z","lastModified":"2026-06-17T00:25:57.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":7.7,"severity":"HIGH","vector":"AV:A/AC:L/Au:S/C:C/I:C/A:C"},"cwe":["CWE-119"],"affected":["qemu/qemu","redhat/enterprise virtualization","redhat/openstack","redhat/enterprise linux","xen/xen"],"epss":{"score":0.15275,"percentile":0.96777,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2015-05-18","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":37053,"kind":"exploit","title":"QEMU - Floppy Disk Controller (FDC) (PoC)","url":"https://www.exploit-db.com/exploits/37053","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/37053.c","file":"exploits/multiple/dos/37053.c","published":"2015-05-18","added":"2015-05-21","updated":"2015-05-21","author":"Marcus Meissner","type":"dos","platform":"multiple","port":null,"verified":false,"codes":["CVE-2015-3456","OSVDB-122072"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://marc.info/?l=oss-security&m=143155206320935&w=2"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 15.3%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=e907746266721f305d67bc0718795fedee2e824c","source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10693","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=143229451215900&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=143387998230996&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0998.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0999.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1000.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1001.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1002.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1003.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1004.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1011.html","source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX201078","source":"cve@mitre.org"},{"url":"http://venom.crowdstrike.com/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3259","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3262","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3274","source":"cve@mitre.org"},{"url":"http://www.fortiguard.com/advisory/2015-05-19-cve-2015-3456-venom-vulnerability","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/74640","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032306","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032311","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1032917","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2608-1","source":"cve@mitre.org"},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-438937.htm","source":"cve@mitre.org"},{"url":"http://xenbits.xen.org/xsa/advisory-133.html","source":"cve@mitre.org"},{"url":"https://access.redhat.com/articles/1444903","source":"cve@mitre.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa95","source":"cve@mitre.org"},{"url":"https://kb.juniper.net/JSA10783","source":"cve@mitre.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10118","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201602-01","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201604-03","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201612-27","source":"cve@mitre.org"},{"url":"https://securityblog.redhat.com/2015/05/13/venom-dont-get-bitten/","source":"cve@mitre.org"},{"url":"https://support.lenovo.com/us/en/product_security/venom","source":"cve@mitre.org"},{"url":"https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/37053/","source":"cve@mitre.org"},{"url":"https://www.suse.com/security/cve/CVE-2015-3456.html","source":"cve@mitre.org"},{"url":"http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=e907746266721f305d67bc0718795fedee2e824c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-3456","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}