Skip to content
OpenAdvisories
Unscored DSA-3284-1 6 CVEs

qemu - security update

Published Jun 13, 2015 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 qemu 1:2.1+dfsg-12+deb8u1

Vulnerabilities 6

  • Unscored —

    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…

  • Unscored —

    The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which a…

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …

  • Unscored —

    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…

  • Unscored —

    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …