qemu vulnerabilities (Ubuntu)
444 vulnerabilities.
qemuUbuntuRace condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by...7.5 HighqemuUbuntuThe rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuThe rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS...6.0 MediumqemuUbuntuMemory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuMemory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuMultiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw...4.4 MediumqemuUbuntuThe v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS...6.0 MediumqemuUbuntuMemory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows...6.0 MediumqemuUbuntuMemory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS...6.0 MediumqemuUbuntuThe rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuThe intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuThe serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows...6.0 MediumqemuUbuntuThe v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows...6.0 MediumqemuUbuntuMemory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local...6.0 MediumqemuUbuntuThe xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest...6.0 MediumqemuUbuntuMemory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka...6.0 MediumqemuUbuntuThe pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS...4.4 MediumqemuUbuntuThe mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly...4.4 MediumqemuUbuntuThe imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly...4.4 MediumqemuUbuntuHeap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick...9.8 CriticalqemuUbuntuMemory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when...6.0 MediumqemuUbuntuThe pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator)...4.4 MediumqemuUbuntuThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local...4.4 MediumqemuUbuntuThe pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows...4.4 MediumqemuUbuntuhw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a...4.4 MediumqemuUbuntuDirectory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest...6.0 MediumqemuUbuntuInteger overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick...4.4 MediumqemuUbuntuThe vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows...6.0 MediumqemuUbuntuThe vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator)...6.0 MediumqemuUbuntuThe net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator)...4.4 MediumqemuUbuntuUse-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU ...4.4 MediumqemuUbuntuqemu, qemu-kvm regressionNo scoreqemuUbuntuThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...5.5 MediumqemuUbuntuThe esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP...6.7 MediumqemuUbuntuThe (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest...7.8 HighqemuUbuntuThe megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS...5.5 MediumqemuUbuntuThe get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause...4.4 MediumqemuUbuntuHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...7.8 HighqemuUbuntuThe vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS...6.0 MediumqemuUbuntuThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS...4.4 MediumqemuUbuntuThe megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter...6.0 MediumqemuUbuntuThe megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID...6.0 MediumqemuUbuntuThe megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS...4.4 MediumqemuUbuntuQEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support,...6.0 MediumqemuUbuntuThe qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a...6.5 MediumqemuUbuntuThe get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU...6.0 MediumqemuUbuntuThe esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in...6.7 MediumqemuUbuntuInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...5.5 MediumqemuUbuntuThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...8.8 HighqemuUbuntuBuffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC...9.8 Critical- Show moreLoading…