442 results · Feed
-
Unscored —
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest O…
-
Unscored —
Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept…
-
Unscored —CVE-2015-8550 Public exploit
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…
-
Unscored —
Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest …
-
Unscored —
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS user…
-
Unscored —
The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service …
-
Unscored —
The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmwar…
-
Unscored —
QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause …
-
Unscored —
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumptio…
-
Unscored —
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remo…
-
Unscored —
hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers ar…
-
Unscored —
hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to …
-
Unscored —
Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows gues…
-
Unscored —
Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS use…
-
Unscored —CVE-2015-3214 Public exploit
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between rea…
-
Unscored —
The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which a…
-
Unscored —
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDR…
-
Unscored —
Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which …
-
Unscored —CVE-2015-5165 EPSS 13%
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…
-
Unscored —
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…
-
Unscored —
Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…
-
Unscored —
Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …
-
Unscored —
Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …
-
Unscored —
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …
-
Unscored —
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…
-
Unscored —
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretati…
-
Unscored —
QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow…
-
Unscored —
The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers…
-
Unscored —
Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest…
-
Unscored —
Off-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in QEMU allows local gues…
-
Unscored —
The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a sm…
-
Unscored —
The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and …
-
Unscored —
The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer…
-
Unscored —
Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and poss…
-
Unscored —
The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code v…
-
Unscored —
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote at…
-
Unscored —
Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary cod…
-
Unscored —
Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vect…
-
Unscored —
Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attack…
-
Unscored —
Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and p…