CVE-2015-7549

The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.

• CWE-476

• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=43b11a91dd861a946b231b89b754285
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.htmlIssue Tracking, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3471Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80761Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1291137Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201602-01Issue Tracking, Third Party Advisory
• http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=43b11a91dd861a946b231b89b754285
• http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175380.htmlIssue Tracking, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3471Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/14/2Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/80761Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1291137Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201602-01Issue Tracking, Third Party Advisory

Published

Oct 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7543aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly …
• CVE-2015-7544redhat-support-plugin-rhev in Red Hat Enterprise Virtualizat…
• CVE-2015-7545The (1) git-remote-ext and (2) unspecified other remote help…
• CVE-2015-7546The identity service in OpenStack Identity (Keystone) before…7.5
• CVE-2015-7547Multiple stack-based buffer overflows in the (1) send_dg and…
• CVE-2015-7548OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x b…
• CVE-2015-7550The keyctl_read_key function in security/keys/keyctl.c in th…
• CVE-2015-7551The Fiddle::Handle implementation in ext/fiddle/handle.c in …
• CVE-2015-7552Heap-based buffer overflow in the gdk_pixbuf_flip function i…
• CVE-2015-7553Race condition in the kernel in Red Hat Enterprise Linux 7, …
• CVE-2015-7554The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 al…
• CVE-2015-7555Heap-based buffer overflow in giffix.c in giffix in giflib 5…