qemu vulnerabilities (Ubuntu)
444 vulnerabilities.
qemuUbuntuThe ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...6.0 MediumqemuUbuntuThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...6.5 MediumqemuUbuntuBuffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when...8.6 HighqemuUbuntuThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...8.4 HighqemuUbuntuQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...6.5 MediumqemuUbuntuThe cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a...5.5 MediumqemuUbuntuThe ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before...6.0 MediumqemuUbuntuMultiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2...7.1 HighqemuUbuntuThe is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1...6.5 MediumqemuUbuntuThe ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows...5.0 MediumqemuUbuntuQEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is...5.5 MediumqemuUbuntuThe (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when...8.1 HighqemuUbuntuUse-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support...8.8 HighqemuUbuntuQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB...7.1 HighqemuUbuntuHeap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.7.9 HighqemuUbuntuStack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI...6.5 MediumqemuUbuntuThe Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service ...7.5 HighqemuUbuntuXen, when used on a system providing PV backends, allows local guest OS administrators to cause a...8.2 HighqemuUbuntuMemory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows...6.5 MediumqemuUbuntuMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...7.7 HighqemuUbuntuThe ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...5.5 MediumqemuUbuntuThe MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS...6.0 MediumqemuUbuntuQemu, when built with VNC display driver support, allows remote attackers to cause a denial of...6.5 MediumqemuUbuntuBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...9.0 CriticalqemuUbuntuHeap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest...8.8 HighqemuUbuntuThe eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of...6.5 MediumqemuUbuntuhw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or...5.0 MediumqemuUbuntuHeap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0...7.2 HighqemuUbuntuThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...6.5 MediumqemuUbuntuhw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...7.5 HighqemuUbuntuThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...3.5 LowqemuUbuntuInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...6.5 MediumqemuUbuntuThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...9.3 HighqemuUbuntuBuffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2...6.5 MediumqemuUbuntuHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...7.2 HighqemuUbuntuThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...6.9 MediumqemuUbuntuQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...4.6 MediumqemuUbuntuXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...4.9 MediumqemuUbuntuXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...7.8 HighqemuUbuntuXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...4.9 MediumqemuUbuntuThe slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with...1.9 LowqemuUbuntuThe (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have...4.9 MediumqemuUbuntuQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command...4.9 MediumqemuUbuntuHeap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2...4.6 MediumqemuUbuntuThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...7.5 High- Show moreLoading…