CVE-2015-4106

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.

• CWE-863

• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.htmlMailing List, Third Party Advisory
• http://support.citrix.com/article/CTX201145Third Party Advisory
• http://www.debian.org/security/2015/dsa-3284Third Party Advisory
• http://www.debian.org/security/2015/dsa-3286Third Party Advisory
• http://www.securityfocus.com/bid/74949Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032467Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2630-1Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-131.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201604-03Third Party Advisory
• https://support.citrix.com/article/CTX206006Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.htmlMailing List, Third Party Advisory
• http://support.citrix.com/article/CTX201145Third Party Advisory
• http://www.debian.org/security/2015/dsa-3284Third Party Advisory
• http://www.debian.org/security/2015/dsa-3286Third Party Advisory
• http://www.securityfocus.com/bid/74949Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032467Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2630-1Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-131.htmlThird Party Advisory
• https://security.gentoo.org/glsa/201604-03Third Party Advisory
• https://support.citrix.com/article/CTX206006Third Party Advisory

Published

Jun 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4100Puppet Enterprise 3.7.x and 3.8.0 might allow remote authent…
• CVE-2015-4101Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4102Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4103Xen 3.3.x through 4.5.x does not properly restrict write acc…
• CVE-2015-4104Xen 3.3.x through 4.5.x does not properly restrict access to…
• CVE-2015-4105Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-t…
• CVE-2015-4107Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-4108Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-4109Multiple SQL injection vulnerabilities in the ratings module…
• CVE-2015-4111mc_demux_mp4_ds.ax in an unspecified third-party codec demux…
• CVE-2015-4112The Management Console in BlackBerry Enterprise Server (BES)…
• CVE-2015-4116Use-after-free vulnerability in the spl_ptr_heap_insert func…