VENOM (security vulnerability)
VENOM is a computer security flaw that was publicly disclosed in 2015 by Jason Geffner of CrowdStrike. The flaw was introduced in 2004 and affected versions of QEMU, Xen, KVM, and VirtualBox from that date until it was patched following disclosure.
The existence of the vulnerability was due to a flaw in QEMU's virtual floppy disk controller.
VENOM is registered in the Common Vulnerabilities and Exposures database as.
