Skip to content
OpenAdvisories
Unscored DLA-1781-1 4 CVEs

qemu - security update

Published May 9, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 qemu 1:2.1+dfsg-12+deb8u11

Vulnerabilities 4

  • Unscored —
    CVE-2018-11806

    m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2018-18849

    In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2018-20815

    In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-9824

    tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leadi…

    qemu qemu slirp4netns Debian Ubuntu