qemu - security update

Fixed packages 1

Vulnerabilities 19

• Unscored —
  CVE-2015-7295

  hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers ar…

  qemu qemu Debian Ubuntu
  Nov 9, 2015
• Unscored —
  CVE-2015-7504

  Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to ca…

  qemu xen qemu Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2015-7512

  Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remo…

  qemu qemu Debian Ubuntu
  Jan 8, 2016
• Unscored —
  CVE-2015-7549

  The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a …

  qemu qemu Debian Ubuntu
  Oct 30, 2017
• Unscored —
  CVE-2015-8345

  The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash a…

  qemu qemu Debian Ubuntu
  Apr 13, 2017
• Unscored —
  CVE-2015-8504

  Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exce…

  qemu qemu Debian Ubuntu
  Apr 11, 2017
• Unscored —
  CVE-2015-8550 Public exploit

  Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 14, 2016
• Unscored —
  CVE-2015-8558

  The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of se…

  qemu qemu Debian Ubuntu
  May 23, 2016
• Unscored —
  CVE-2015-8567

  Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).

  qemu qemu Debian Ubuntu
  Apr 13, 2017
• Unscored —
  CVE-2015-8568

  Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cau…

  qemu qemu Debian Ubuntu
  Apr 11, 2017
• Unscored —
  CVE-2015-8613

  Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulat…

  qemu qemu Debian Ubuntu
  Apr 11, 2017
• Unscored —
  CVE-2015-8619

  The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write a…

  qemu qemu Debian Ubuntu
  Apr 13, 2017
• Unscored —
  CVE-2015-8743

  QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It c…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2015-8744

  QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2015-8745

  QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-1568

  Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS user…

  qemu qemu Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-1714

  The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmwar…

  qemu qemu Debian Ubuntu
  Apr 7, 2016
• Unscored —
  CVE-2016-1922

  QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null poi…

  qemu qemu Debian Ubuntu
  Dec 29, 2016
• Unscored —
  CVE-2016-1981

  QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could …

  qemu qemu Debian Ubuntu
  Dec 29, 2016