qemu vulnerabilities (Ubuntu)
444 vulnerabilities.
qemuUbuntuAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...6.5 MediumqemuUbuntuqemu regressionNo scoreqemuUbuntuAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...3.2 LowqemuUbuntuAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...6.0 MediumqemuUbuntuA race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2...7.5 HighqemuUbuntuide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...3.9 LowqemuUbuntuA flaw was found in the memory management API of QEMU during the initialization of a memory...6.0 MediumqemuUbuntuhw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...5.5 MediumqemuUbuntuA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...3.2 LowqemuUbuntueth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...6.5 MediumqemuUbuntuati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...6.5 MediumqemuUbuntuAn issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the...5.5 MediumqemuUbuntupci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because...3.2 LowqemuUbuntuhw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a...3.2 LowqemuUbuntufdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block...3.2 LowqemuUbuntuhw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.5.3 MediumqemuUbuntuQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd...5.0 MediumqemuUbuntuQEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is...3.2 LowqemuUbuntuhw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the...5.0 MediumqemuUbuntuAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...5.0 MediumqemuUbuntuA heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation...6.3 MediumqemuUbuntuIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 LowqemuUbuntuhw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow....5.3 MediumqemuUbuntuQEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an...3.3 LowqemuUbuntuImportant: virt:rhel security update6.5 MediumqemuUbuntuIn QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL...2.3 LowqemuUbuntuoss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.3.3 LowqemuUbuntuAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 MediumqemuUbunturom_copy() in hw/core/loader.c in QEMU 4.1.0 does not validate the relationship between two...5.6 MediumqemuUbuntuhw/pci/pci.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access by providing...5.5 MediumqemuUbuntuati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 MediumqemuUbuntuhw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 MediumqemuUbuntuaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...2.5 LowqemuUbuntuIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...3.2 LowqemuUbuntuIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...3.9 LowqemuUbuntusd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...5.5 MediumqemuUbuntuIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....3.8 LowqemuUbuntuAn integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA...3.3 LowqemuUbuntuiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LowqemuUbuntulibslirp: use after free vulnerability cause a denial of service.7.5 HighqemuUbuntuA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for...5.5 MediumqemuUbuntuhw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation...5.8 MediumqemuUbuntuQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 LowqemuUbuntuAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 HighqemuUbuntuIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumqemuUbuntutcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumqemuUbuntuThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...6.5 MediumqemuUbuntuIn QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...3.8 LowqemuUbuntulibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 HighqemuUbuntuip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 High- Show moreLoading…