qemu vulnerabilities (Ubuntu)
444 vulnerabilities.
qemuUbuntuqemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from...7.8 HighqemuUbuntuThe QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which...9.8 CriticalqemuUbuntuThe QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection,...9.8 CriticalqemuUbuntuinterface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.7.5 HighqemuUbuntuQEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of...7.5 HighqemuUbuntuMicroarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some...5.6 MediumqemuUbuntuMicroarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors...5.6 MediumqemuUbuntuMicroarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing...5.6 MediumqemuUbuntuMicroarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors...5.6 MediumqemuUbuntuhw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the...7.5 HighqemuUbuntutcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in...5.5 MediumqemuUbuntuhw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares...3.3 LowqemuUbuntuQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of...4.4 MediumqemuUbuntuIn QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.7.8 HighqemuUbuntuIn QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which...9.8 CriticalqemuUbuntuv9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash)...4.7 MediumqemuUbuntuA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...5.0 MediumqemuUbuntuThe Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to...5.7 MediumqemuUbuntuhw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...5.5 MediumqemuUbuntuThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...5.5 MediumqemuUbuntuIn Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an...5.5 MediumqemuUbuntuAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...7.0 HighqemuUbuntuQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer...6.5 MediumqemuUbuntuqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...9.8 CriticalqemuUbuntuQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...7.5 HighqemuUbuntuQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...7.5 HighqemuUbuntuqemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash...5.5 MediumqemuUbuntuqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...7.5 HighqemuUbuntum_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.8.2 HighqemuUbuntulinux-4.9 - security update5.5 MediumqemuUbuntuQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...5.5 MediumqemuUbuntuqemu regressionNo scoreqemuUbuntuThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...8.8 HighqemuUbuntuInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...5.5 MediumqemuUbuntuThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...6.0 MediumqemuUbuntuVNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to...7.5 HighqemuUbuntuImportant: kernel security, bug fix, and enhancement update5.6 MediumqemuUbuntuThe Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service ...6.5 MediumqemuUbuntuThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...5.8 MediumqemuUbuntuhw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration,...10.0 CriticalqemuUbuntuThe mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged...6.0 MediumqemuUbuntuRace condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows...5.6 MediumqemuUbuntuqemu regressionNo scoreqemuUbuntuInteger overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick...8.8 HighqemuUbuntuQEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest...5.5 MediumqemuUbuntuQEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows...6.5 MediumqemuUbuntuThe address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local...4.4 MediumqemuUbuntuStack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest...5.5 MediumqemuUbuntuThe dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS...5.5 MediumqemuUbuntuqemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to...7.5 High- Show moreLoading…