Skip to content
OpenAdvisories

Package · Debian

qemu

442 known vulnerabilities.

442 results · Feed

  • Medium 5.8

    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. …

  • Unscored —

    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerabl…

  • Medium 5.5

    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access iss…

  • Unscored —
    CVE-2018-12617 Public exploit EPSS 25%

    qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 …

  • Unscored —

    m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

  • High 7.6

    Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user insid…

  • Unscored —

    Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged …

  • Unscored —

    The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute …

  • Unscored —

    Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu…

  • Unscored —

    The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds r…

  • Unscored —

    The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to caus…

  • Unscored —

    Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denia…

  • Unscored —

    VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory a…

  • Medium 5.6
    CVE-2017-5715 Public exploit EPSS 73%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  • Unscored —

    The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error …

  • Unscored —

    hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds acc…

  • Unscored —

    The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a …

  • Unscored —

    Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to ca…

  • Unscored —

    The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denia…

  • Unscored —

    Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, rel…

  • Unscored —

    Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users …

  • Unscored —

    Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest …

  • Unscored —
    CVE-2017-13672 Public exploit

    QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to …

  • Unscored —

    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to …

  • Unscored —

    The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used cau…

  • Unscored —

    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact v…

  • Unscored —

    QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileg…

  • Unscored —

    The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a …

  • Unscored —

    Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (cr…

  • Unscored —

    Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of …

  • Unscored —

    QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zer…

  • Unscored —

    The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users…

  • Unscored —

    qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of servi…

  • Unscored —

    Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a de…

  • Unscored —

    The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of…

  • Unscored —

    Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest…

  • Unscored —

    The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows…

  • Unscored —

    The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS use…

  • Unscored —

    QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest …

  • Unscored —

    Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged …