qemu - security update

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2015-7295

  hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers ar…

  qemu qemu Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-7504

  Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to ca…

  qemu xen qemu Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2015-7512

  Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remo…

  qemu qemu Debian Ubuntu
  Jan 8, 2016
• Unscored —
  CVE-2015-8345

  The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash a…

  qemu qemu Debian Ubuntu
  Apr 13, 2017
• Unscored —
  CVE-2015-8504

  Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exce…

  qemu qemu Debian Ubuntu
  Apr 11, 2017
• Unscored —
  CVE-2015-8558

  The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of se…

  qemu qemu Debian Ubuntu
  May 23, 2016
• Unscored —
  CVE-2015-8743

  QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It c…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-1568

  Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS user…

  qemu qemu Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-1714

  The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmwar…

  qemu qemu Debian Ubuntu
  Apr 7, 2016
• Unscored —
  CVE-2016-1922

  QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null poi…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-1981

  QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could …

  qemu qemu Debian Ubuntu
  Dec 29, 2016