qemu vulnerabilities (SUSE)
318 vulnerabilities.
qemuSUSEIn QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL...2.3 LowqemuSUSEAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 MediumqemuSUSErom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...5.6 MediumqemuSUSEati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 MediumqemuSUSEhw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 MediumqemuSUSEaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...2.5 LowqemuSUSEIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...3.2 LowqemuSUSEIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...3.9 LowqemuSUSEsd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...5.5 MediumqemuSUSEIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....3.8 LowqemuSUSEiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LowqemuSUSElibslirp: use after free vulnerability cause a denial of service.7.5 HighqemuSUSEhw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation...5.8 MediumqemuSUSEQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 LowqemuSUSEAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 HighqemuSUSEIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumqemuSUSEtcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumqemuSUSEInsufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a...4.3 MediumqemuSUSETSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...6.5 MediumqemuSUSEImproper invalidation for page table updates by a virtual guest operating system for multiple...6.5 MediumqemuSUSEIn QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...3.8 LowqemuSUSElibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 HighqemuSUSEip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 HighqemuSUSEqemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from...7.8 HighqemuSUSEinterface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.7.5 HighqemuSUSEMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 MediumqemuSUSEMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 MediumqemuSUSEMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 MediumqemuSUSEMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 MediumqemuSUSEhw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the...7.5 HighqemuSUSEtcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 MediumqemuSUSEhw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares...3.3 LowqemuSUSEQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of...4.4 MediumqemuSUSEIn QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.7.8 HighqemuSUSEIn QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which...9.8 CriticalqemuSUSEhw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are...5.5 MediumqemuSUSEv9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...4.7 MediumqemuSUSEA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...5.0 MediumqemuSUSEhw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...5.5 MediumqemuSUSEThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...5.5 MediumqemuSUSEIn Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an...5.5 MediumqemuSUSEAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...7.0 HighqemuSUSEQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer...6.5 MediumqemuSUSEqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...9.8 CriticalqemuSUSEQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...7.5 HighqemuSUSEQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...7.5 HighqemuSUSEqemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash...5.5 MediumqemuSUSEqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...7.5 HighqemuSUSEm_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.8.2 HighqemuSUSElinux-4.9 - security update5.5 Medium- Show moreLoading…