Skip to content
OpenAdvisories
Unscored DTSA-133-1 6 CVEs

kvm - multiple vulnerabilities

Published May 24, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 kvm 60+dfsg-1+lenny1

Vulnerabilities 6

  • Unscored —
    CVE-2007-1320

    Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2…

    qemu Debian
  • Unscored —
    CVE-2007-1321

    Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local…

    qemu Debian
  • Unscored —
    CVE-2007-1322

    QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.

    qemu Debian
  • Unscored —
    CVE-2007-1366

    QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrate…

    qemu Debian
  • Unscored —
    CVE-2008-0928

    Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host u…

    qemu Debian
  • Unscored —
    CVE-2008-2004

    The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local…

    qemu Debian