Skip to content
OpenAdvisories
Unscored DSA-4506-1 3 CVEs

qemu - security update

Published Aug 24, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 qemu 1:2.8+dfsg-6+deb9u8

Vulnerabilities 3

  • Unscored —
    CVE-2018-20815

    In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-13164

    qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2019-14378 Public exploit EPSS 17%

    ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a ca…

    qemu android qemu slirp4netns Debian Ubuntu