CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.7
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: the floppy disk controller (fdc) in qemu, as used in xen 4.5.x and earlier and kvm, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) fd_cmd_read_id, (2) fd_cmd_drive_specification_command, or other unspecified commands, aka venom. though the venom vulnerability is also agnostic of the guest operating system, an attacker (or an attacker’s malware) would need to have administrative or root privileges in the guest operating system in order to exploit venom
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-05-13
Last Modified Date: 2019-04-22