qemu - security update

Fixed packages 1

Vulnerabilities 52

• High 7.6
  CVE-2016-9602

  Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user insid…

  qemu qemu Virtualization Debian Ubuntu
  Apr 26, 2018
• Medium 5.6
  CVE-2017-5715 Public exploit EPSS 73%

  Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Medium 5.5
  CVE-2016-9603

  A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; …

  QEMU QEMU xen qemu Virtualization Debian Ubuntu Alpine
  Jul 27, 2018
• Medium 5.5
  CVE-2017-2615

  Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access iss…

  QEMU display qemu xen Debian Ubuntu Alpine
  Jul 2, 2018
• Medium 5.5
  CVE-2017-2620

  Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds…

  QEMU QEMU xen qemu Virtualization Debian Ubuntu Alpine
  Jul 27, 2018
• Unscored —
  CVE-2015-8666

  Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.

  qemu qemu Debian Ubuntu
  Apr 11, 2017
• Unscored —
  CVE-2016-10155

  Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause …

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 15, 2017
• Unscored —
  CVE-2016-2198

  QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. I…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-6833

  Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) all…

  qemu qemu Debian Ubuntu
  Dec 10, 2016
• Unscored —
  CVE-2016-6835

  The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS a…

  qemu qemu Debian Ubuntu
  Dec 10, 2016
• Unscored —
  CVE-2016-8576

  The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to …

  qemu qemu qemu Debian Ubuntu Alpine
  Nov 4, 2016
• Unscored —
  CVE-2016-8667

  The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause…

  qemu qemu Debian Ubuntu
  Nov 4, 2016
• Unscored —
  CVE-2016-8669

  The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administra…

  qemu qemu Debian Ubuntu
  Nov 4, 2016
• Unscored —
  CVE-2016-9776

  QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinit…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-9907

  Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could …

  qemu qemu Debian Ubuntu
  Dec 23, 2016
• Unscored —
  CVE-2016-9911

  Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur…

  qemu qemu Debian Ubuntu
  Dec 23, 2016
• Unscored —
  CVE-2016-9914

  Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of se…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-9915

  Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denia…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-9916

  Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-9921

  Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It …

  qemu qemu Debian Ubuntu
  Dec 23, 2016
• Unscored —
  CVE-2016-9922

  The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, …

  qemu qemu Debian Ubuntu
  Mar 27, 2017
• Unscored —
  CVE-2017-10806

  Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a de…

  qemu qemu Debian Ubuntu
  Aug 2, 2017
• Unscored —
  CVE-2017-10911

  The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS use…

  linux-raspi2 linux-hwe linux-gcp linux Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-11434

  The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of…

  qemu qemu Debian Ubuntu
  Jul 25, 2017
• Unscored —
  CVE-2017-14167

  Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest …

  qemu qemu Debian Ubuntu
  Sep 8, 2017
• Unscored —
  CVE-2017-15038

  Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users …

  qemu qemu Debian Ubuntu
  Oct 9, 2017
• Unscored —
  CVE-2017-15289

  The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denia…

  qemu qemu Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2017-16845

  hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds acc…

  qemu qemu Debian Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-18030

  The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to caus…

  qemu Debian
  Jan 23, 2018
• Unscored —
  CVE-2017-18043

  Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu…

  qemu qemu Debian Ubuntu
  Jan 31, 2018
• Unscored —
  CVE-2017-5525

  Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of…

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 15, 2017
• Unscored —
  CVE-2017-5526

  Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial …

  qemu qemu Debian Ubuntu
  Mar 15, 2017
• Unscored —
  CVE-2017-5579

  Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS pri…

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 15, 2017
• Unscored —
  CVE-2017-5667

  The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privi…

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 16, 2017
• Unscored —
  CVE-2017-5856

  Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS…

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 16, 2017
• Unscored —
  CVE-2017-5973

  The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users t…

  qemu qemu Debian Ubuntu
  Mar 27, 2017
• Unscored —
  CVE-2017-5987

  The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privi…

  qemu qemu Debian Ubuntu
  Mar 20, 2017
• Unscored —
  CVE-2017-6505

  The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS …

  qemu qemu qemu Debian Ubuntu Alpine
  Mar 15, 2017
• Unscored —
  CVE-2017-7377

  The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS pr…

  qemu qemu Debian Ubuntu
  Apr 10, 2017
• Unscored —
  CVE-2017-7493

  Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable…

  QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  May 17, 2017
• Unscored —
  CVE-2017-7718

  hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of se…

  qemu qemu Debian Ubuntu
  Apr 20, 2017
• Unscored —
  CVE-2017-7980

  Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest…

  qemu qemu Debian Ubuntu
  Jul 25, 2017
• Unscored —
  CVE-2017-8086

  Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS pr…

  qemu qemu Debian Ubuntu
  May 2, 2017
• Unscored —
  CVE-2017-8112

  hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (…

  qemu qemu Debian Ubuntu
  May 2, 2017
• Unscored —
  CVE-2017-8309

  Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (mem…

  qemu qemu Debian Ubuntu
  May 23, 2017
• Unscored —
  CVE-2017-8379

  Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged …

  qemu qemu Debian Ubuntu
  May 23, 2017
• Unscored —
  CVE-2017-9330

  QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to …

  qemu qemu Debian Ubuntu
  Jun 8, 2017
• Unscored —
  CVE-2017-9373

  Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged …

  qemu qemu Debian Ubuntu
  Jun 16, 2017
• Unscored —
  CVE-2017-9374

  Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged …

  qemu qemu Debian Ubuntu
  Jun 16, 2017
• Unscored —
  CVE-2017-9503

  QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest …

  qemu qemu Debian Ubuntu
  Jun 16, 2017
• Unscored —
  CVE-2018-5683

  The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

  qemu qemu Debian Ubuntu
  Jan 23, 2018
• Unscored —
  CVE-2018-7550

  The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute …

  qemu qemu Debian Ubuntu
  Mar 1, 2018