CVE-2015-3456

HighPublished

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds...

Published: May 13, 2015
Updated: Aug 6, 2024
Assigning CNA: mitre
Evidence observed: May 18, 2015

Primary CVSS

7.7/ 10High

nvd · CVSS 2.0

AV:A/AC:L/Au:S/C:C/I:C/A:C

EPSS probability estimate

15.3%

Moderate · next 30 days

Percentile: 96.7%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.

Sources

cve-2015-3456Exploit
Experiments related to CVE-2015-3456
poisonfrogExploit
A VENOM (CVE-2015-3456) Exploit / PoC written in C.
S-V-Project-Implementation-of-CVE-2015-3256PoC
Reproducible crash proof-of-concept for CVE-2015-3456 (VENOM) targeting QEMU's virtual floppy disk controller. Demonstrates guest-controlled writes to trigger host-side QEMU process crash with GDB analysis.
QEMU - Floppy Disk Controller (FDC) (PoC)Exploit
Marcus Meissner · multiple · May 18, 2015

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.