CVE-2015-7549

Name	CVE-2015-7549
Description	The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-3471-1
Debian Bugs	808131

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
qemu (PTS)	jessie, jessie (lts)	1:2.1+dfsg-12+deb8u23	fixed
	stretch (security)	1:2.8+dfsg-6+deb9u17	fixed
	stretch (lts), stretch	1:2.8+dfsg-6+deb9u19	fixed
	buster (security), buster, buster (lts)	1:3.1+dfsg-8+deb10u12	fixed
	bullseye	1:5.2+dfsg-11+deb11u3	fixed
	bullseye (security)	1:5.2+dfsg-11+deb11u2	fixed
	bookworm	1:7.2+dfsg-7+deb12u7	fixed
	sid, trixie	1:9.2.0+ds-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
qemu	source	squeeze	(not affected)
qemu	source	wheezy	(not affected)
qemu	source	jessie	1:2.1+dfsg-12+deb8u5a	DSA-3471-1
qemu	source	(unstable)	1:2.5+dfsg-1		808131
qemu-kvm	source	squeeze	(not affected)
qemu-kvm	source	wheezy	(not affected)
qemu-kvm	source	(unstable)	(unfixed)

Notes

[wheezy] - qemu <not-affected> (Vulnerable code not present)
[squeeze] - qemu <not-affected> (Vulnerable code not present)
[wheezy] - qemu-kvm <not-affected> (Vulnerable code not present)
[squeeze] - qemu-kvm <not-affected> (Vulnerable code not present)
Upstream commit: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=43b11a91dd861a946b231b89b7542856ade23d1b (v2.5.0-rc0)
Introduced by: http://git.qemu.org/?p=qemu.git;a=commitdiff;h=d35e428c8400f9ddc07e5a15ff19622c869b9ba0 (v1.2.0-rc0)