qemu - security update

Fixed packages 1

Vulnerabilities 11

• Medium 5.8
  CVE-2017-15119

  The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. …

  QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  Jul 27, 2018
• Medium 5.6
  CVE-2017-5715 Public exploit EPSS 73%

  Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Unscored —
  CVE-2017-15038

  Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users …

  qemu qemu Debian Ubuntu
  Oct 9, 2017
• Unscored —
  CVE-2017-15124

  VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory a…

  QEMU QEMU qemu qemu Virtualization Debian Ubuntu
  Jan 9, 2018
• Unscored —
  CVE-2017-15268

  Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, rel…

  qemu Debian
  Oct 12, 2017
• Unscored —
  CVE-2017-15289

  The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denia…

  qemu qemu Debian Ubuntu
  Oct 16, 2017
• Unscored —
  CVE-2017-16845

  hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds acc…

  qemu qemu Debian Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-17381

  The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error …

  qemu qemu Debian Ubuntu
  Dec 6, 2017
• Unscored —
  CVE-2017-18043

  Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu…

  qemu qemu Debian Ubuntu
  Jan 31, 2018
• Unscored —
  CVE-2018-5683

  The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

  qemu qemu Debian Ubuntu
  Jan 23, 2018
• Unscored —
  CVE-2018-7550

  The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute …

  qemu qemu Debian Ubuntu
  Mar 1, 2018