Every CVE Search/ Get API key

CVE-2012-3515

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a...

7.2 HighFix available

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Exploit likelihood

0.53%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
CVE-2012-3515
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
CVE-2012-3515
Updated
2026-11-02
EUVDEUVD-2012-3470 No score

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
EUVD-2012-3470
Updated
2026-11-03
GitHub AdvisoriesGHSA-rwhm-5hjg-54j9 No score

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a...

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
GHSA-rwhm-5hjg-54j9
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
CVE-2012-3515
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3515 No score

Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."

Record
DEBIAN-CVE-2012-3515
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:10233-1 No score

qemu-2.6.1-1.5 on GA media

These are all security issues fixed in the qemu-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10233-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10285-1 No score

qemu-linux-user-2.6.1-1.5 on GA media

These are all security issues fixed in the qemu-linux-user-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10285-1
Updated
2026-11-02
OSVSUSE-SU-2015:0929-1 No score

Security update for kvm

The kvm qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17).

Also a temp file race was fixed. (CVE-2012-2652)

Security Issue reference:

* CVE-2012-3515
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
Record
SUSE-SU-2015:0929-1
Updated
2026-11-02
OSVSUSE-SU-2015:0943-1 No score

Security update for KVM

This update fixes a file permission issue with qga (the QEMU Guest Agent) from the qemu/kvm package and includes several bug-fixes.

(bnc#818182) (CVE-2013-2007) (bnc#786813) (bnc#725008) (bnc#712137) (bnc#824340)

Security Issues:

* CVE-2013-2007
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007>
Record
SUSE-SU-2015:0943-1
Updated
2026-11-02

Affected products

Show 1 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
qemu
Debian:12
 before 1.1.2+dfsg-1
1.1.2+dfsg-1
qemu
Debian:13
 before 1.1.2+dfsg-1
1.1.2+dfsg-1
qemu
Debian:14
 before 1.1.2+dfsg-1
1.1.2+dfsg-1
xen
Debian:12
 before 4.1.3-2
4.1.3-2
xen
Debian:13
 before 4.1.3-2
4.1.3-2
xen
Debian:14
 before 4.1.3-2
4.1.3-2
qemu-kvm
Debian:6.0
 before 0.12.5+dfsg-5+squeeze9, plus listed versions
0.12.5+dfsg-50.12.5+dfsg-5+squeeze10.12.5+dfsg-5+squeeze20.12.5+dfsg-5+squeeze30.12.5+dfsg-5+squeeze4
Show 5 moreShow less
0.12.5+dfsg-5+squeeze4~bpo50+10.12.5+dfsg-5+squeeze50.12.5+dfsg-5+squeeze60.12.5+dfsg-5+squeeze70.12.5+dfsg-5+squeeze8
0.12.5+dfsg-5+squeeze9
xen-qemu-dm-4.0
Debian:6.0
 before 4.0.1-2+squeeze2, plus listed versions
4.0.1-24.0.1-2+squeeze1
4.0.1-2+squeeze2
qemu
Debian:6.0
 before 0.12.5+dfsg-3squeeze2, plus listed versions
0.12.5+dfsg-30.12.5+dfsg-3squeeze1
0.12.5+dfsg-3squeeze2
qemu-img-rhev
Red Hat:enterprise_linux:6::hypervisor
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
Show 50 moreShow less
Affected packages
PackageAffectedFixed
qemu-kvm-rhev
Red Hat:enterprise_linux:6::hypervisor
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-rhev-debuginfo
Red Hat:enterprise_linux:6::hypervisor
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-rhev-tools
Red Hat:enterprise_linux:6::hypervisor
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-guest-agent
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-img
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-tools
Red Hat:enterprise_linux:6::client
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-guest-agent
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-img
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-tools
Red Hat:enterprise_linux:6::computenode
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-guest-agent
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-img
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-tools
Red Hat:enterprise_linux:6::server
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-guest-agent
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-img
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
qemu-kvm-tools
Red Hat:enterprise_linux:6::workstation
 before 2:0.12.1.2-2.295.el6_3.2
2:0.12.1.2-2.295.el6_3.2
kmod-kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kmod-kvm-debug
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-qemu-img
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-tools
Red Hat:rhel_virtualization:5::client
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kmod-kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kmod-kvm-debug
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-qemu-img
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
kvm-tools
Red Hat:rhel_virtualization:5::server
 before 0:83-249.el5_8.5
0:83-249.el5_8.5
xen
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-libs
Red Hat:enterprise_linux:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-debuginfo
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-devel
Red Hat:rhel_virtualization:5::client
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-libs
Red Hat:enterprise_linux:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-debuginfo
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
xen-devel
Red Hat:rhel_virtualization:5::server
 before 0:3.0.3-135.el5_8.5
0:3.0.3-135.el5_8.5
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.3-20120926.0.el6_3
0:6.3-20120926.0.el6_3
qemu
openSUSE:Tumbleweed
 before 2.6.1-1.5
2.6.1-1.5
qemu-linux-user
openSUSE:Tumbleweed
 before 2.6.1-1.5
2.6.1-1.5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-3515 is a high vulnerability (CVSS 7.2) in Qemu, published August 31, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in qemu 1.1.2+dfsg-1.

References

Show 170 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open