Skip to content
OpenAdvisories
Unscored DLA-573-1 6 CVEs

qemu - security update

Published Jul 30, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 qemu 1.1.2+dfsg-6+deb7u14

Vulnerabilities 6

  • Unscored —
    CVE-2015-5239

    Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process …

    QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  • Unscored —
    CVE-2016-2857

    The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-4020

    The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-4439

    The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly c…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2016-5403

    The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of serv…

    qemu xen qemu xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-6351

    The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulatio…

    qemu qemu Debian Ubuntu