CVE-2015-5745

Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.

• CWE-120

• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/06/5Exploit, Mailing List, Third Party Advisory
• https://github.com/qemu/qemu/commit/7882080388be5088e72c425b02223c02e6cb4295Patch, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2015-07/msg05458.htmlMailing List, Patch, Third Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/06/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/06/5Exploit, Mailing List, Third Party Advisory
• https://github.com/qemu/qemu/commit/7882080388be5088e72c425b02223c02e6cb4295Patch, Third Party Advisory
• https://lists.gnu.org/archive/html/qemu-devel/2015-07/msg05458.htmlMailing List, Patch, Third Party Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/1180-security-advisory-13Third Party Advisory

Published

Jan 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5737The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.s…
• CVE-2015-5738The RSA-CRT implementation in the Cavium Software Developmen…7.5
• CVE-2015-5739The net/http library in net/textproto/reader.go in Go before…
• CVE-2015-5740The net/http library in net/http/transfer.go in Go before 1.…
• CVE-2015-5741The net/http library in net/http/transfer.go in Go before 1.…9.8
• CVE-2015-5742VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0…
• CVE-2015-5746AppleFileConduit in Apple iOS before 8.4.1 allows attackers …
• CVE-2015-5747The fasttrap driver in the kernel in Apple OS X before 10.10…
• CVE-2015-5748The kernel in Apple OS X before 10.10.5 does not properly mo…
• CVE-2015-5749The Sandbox_profiles component in Apple iOS before 8.4.1 all…
• CVE-2015-5750Data Detectors Engine in Apple OS X before 10.10.5 allows at…
• CVE-2015-5751QuickTime 7 in Apple OS X before 10.10.5 allows remote attac…