CVE ID:	CVE-2015-3456
Description:	The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
Test IDs:	1.3.6.1.4.1.25623.1.0.703274   1.3.6.1.4.1.25623.1.0.703262   1.3.6.1.4.1.25623.1.0.869499   1.3.6.1.4.1.25623.1.0.871371   1.3.6.1.4.1.25623.1.0.882190   1.3.6.1.4.1.25623.1.0.869638   1.3.6.1.4.1.25623.1.0.882181   1.3.6.1.4.1.25623.1.0.871366   1.3.6.1.4.1.25623.1.0.882182   1.3.6.1.4.1.25623.1.0.703259   1.3.6.1.4.1.25623.1.0.850653   1.3.6.1.4.1.25623.1.0.882193   1.3.6.1.4.1.25623.1.0.871361   1.3.6.1.4.1.25623.1.0.850680   1.3.6.1.4.1.25623.1.0.123118   1.3.6.1.4.1.25623.1.0.123117   1.3.6.1.4.1.25623.1.0.123115   1.3.6.1.4.1.25623.1.0.123116   1.3.6.1.4.1.25623.1.0.850789   1.3.6.1.4.1.25623.1.0.850752   1.3.6.1.4.1.25623.1.0.850850   1.3.6.1.4.1.25623.1.0.850946   1.3.6.1.4.1.25623.1.0.850901   1.3.6.1.4.1.25623.1.0.851046   1.3.6.1.4.1.25623.1.1.4.2015.0889.2   1.3.6.1.4.1.25623.1.1.4.2015.0940.1   1.3.6.1.4.1.25623.1.1.4.2015.0929.1   1.3.6.1.4.1.25623.1.1.4.2015.0889.1   1.3.6.1.4.1.25623.1.1.4.2015.0927.1   1.3.6.1.4.1.25623.1.1.4.2015.0943.1   1.3.6.1.4.1.25623.1.1.4.2015.0944.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3456 BugTraq ID: 74640 http://www.securityfocus.com/bid/74640 Debian Security Information: DSA-3259 (Google Search) http://www.debian.org/security/2015/dsa-3259 Debian Security Information: DSA-3262 (Google Search) http://www.debian.org/security/2015/dsa-3262 Debian Security Information: DSA-3274 (Google Search) http://www.debian.org/security/2015/dsa-3274 https://www.exploit-db.com/exploits/37053/ http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html https://security.gentoo.org/glsa/201602-01 https://security.gentoo.org/glsa/201604-03 https://security.gentoo.org/glsa/201612-27 HPdes Security Advisory: HPSBMU03336 http://marc.info/?l=bugtraq&m=143229451215900&w=2 HPdes Security Advisory: HPSBMU03349 http://marc.info/?l=bugtraq&m=143387998230996&w=2 HPdes Security Advisory: SSRT102076 http://marc.info/?l=bugtraq&m=143229451215900&w=2 http://venom.crowdstrike.com/ RedHat Security Advisories: RHSA-2015:0998 http://rhn.redhat.com/errata/RHSA-2015-0998.html RedHat Security Advisories: RHSA-2015:0999 http://rhn.redhat.com/errata/RHSA-2015-0999.html RedHat Security Advisories: RHSA-2015:1000 http://rhn.redhat.com/errata/RHSA-2015-1000.html RedHat Security Advisories: RHSA-2015:1001 http://rhn.redhat.com/errata/RHSA-2015-1001.html RedHat Security Advisories: RHSA-2015:1002 http://rhn.redhat.com/errata/RHSA-2015-1002.html RedHat Security Advisories: RHSA-2015:1003 http://rhn.redhat.com/errata/RHSA-2015-1003.html RedHat Security Advisories: RHSA-2015:1004 http://rhn.redhat.com/errata/RHSA-2015-1004.html RedHat Security Advisories: RHSA-2015:1011 http://rhn.redhat.com/errata/RHSA-2015-1011.html http://www.securitytracker.com/id/1032306 http://www.securitytracker.com/id/1032311 http://www.securitytracker.com/id/1032917 SuSE Security Announcement: SUSE-SU-2015:0889 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html SuSE Security Announcement: SUSE-SU-2015:0896 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html SuSE Security Announcement: SUSE-SU-2015:0923 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html SuSE Security Announcement: SUSE-SU-2015:0927 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html SuSE Security Announcement: SUSE-SU-2015:0929 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html SuSE Security Announcement: openSUSE-SU-2015:0893 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html SuSE Security Announcement: openSUSE-SU-2015:0894 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:0983 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html SuSE Security Announcement: openSUSE-SU-2015:1400 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html http://www.ubuntu.com/usn/USN-2608-1