Skip to contentQemu vulnerabilities
Newest
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- qemu, qemu (virtio-rng), debian linux +2 more +4 moreA flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest...CVE-2013-2016Fix available7.8 High
- qemu, canonical ubuntu linux +1 moreOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...CVE-2014-5388Fix available4.6 Medium
- qemuvmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the...CVE-2014-5263Fix available6.8 Medium
- qemuUse-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS...CVE-2014-3471Fix available5.5 Medium
- qemuhw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm...CVE-2014-3461Fix available6.8 Medium
- qemuOff-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...CVE-2014-2894Fix available7.2 High
- qemuHeap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2...CVE-2014-0182Fix available7.5 High
- qemu, redhat enterprise linux +1 moreInteger overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and...CVE-2014-0150Fix available4.9 Medium
- qemu, canonical ubuntu linux +1 morehw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial...CVE-2013-4544Fix available4.9 Medium
- qemu, xen, redhat enterprise linux +2 moreBuffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen,...CVE-2011-3346Fix available4.0 Medium
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...CVE-2014-0147Fix available6.2 Medium
- qemuThe qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows...CVE-2014-0146Fix available5.5 Medium
- qemuMultiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a...CVE-2014-0145Fix available7.8 High
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...CVE-2014-0144Fix available8.6 High
- qemu, redhat enterprise linux +1 moreMultiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users...CVE-2014-0143Fix available7.0 High
- qemuQEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero...CVE-2014-0142Fix available5.5 Medium
- qemu, redhat enterprise linux, enterprise linux server supplementary +2 moreBuffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in...CVE-2011-4111Fix available6.8 Medium
- qemuArray index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows...CVE-2013-6399Fix available7.5 High
- qemuThe virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow...CVE-2013-4542Fix available7.5 High
- qemuThe usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote...CVE-2013-4541Fix available7.5 High
- qemu, opensuse +1 moreBuffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to...CVE-2013-4540Fix available7.5 High
- qemuMultiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2...CVE-2013-4539Fix available7.5 High
- qemuMultiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7...CVE-2013-4538Fix available7.5 High
- qemuThe ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to...CVE-2013-4537Fix available7.5 High
- qemuAn user able to alter the savevm data (either on the disk or over the wire during migration)...CVE-2013-4536Fix available7.8 High
- qemu, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers...CVE-2013-4535Fix available8.8 High
- qemuBuffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a...CVE-2013-4534Fix available7.5 High
- qemuBuffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows...CVE-2013-4533Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreQemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...CVE-2013-4532Fix available7.8 High
- qemuBuffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a...CVE-2013-4531Fix available7.5 High
- qemuBuffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial...CVE-2013-4530Fix available7.5 High
- qemuBuffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a...CVE-2013-4529Fix available7.5 High
- qemuBuffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute...CVE-2013-4527Fix available7.5 High
- qemuBuffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial...CVE-2013-4526Fix available7.5 High
- qemuThe virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to...CVE-2013-4151Fix available7.5 High
- qemuThe virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2...CVE-2013-4150Fix available7.5 High
- qemuBuffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x...CVE-2013-4149Fix available7.5 High
- qemuInteger signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x...CVE-2013-4148Fix available7.5 High
- qemu, xen +1 moreThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...CVE-2013-4375Fix available2.7 Low
- qemuUse-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows...CVE-2013-4377Fix available2.3 Low
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...CVE-2013-4344Fix available7.2 High
- qemuThe qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses...CVE-2013-2007Fix available6.9 Medium
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreBuffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3...CVE-2012-6075Fix available9.3 High
- qemu, xen, redhat enterprise linux +2 more +4 moreThe Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local...CVE-2015-3456Public exploitFix availableEPSS 15.3%7.7 High
- qemu, arista eos, canonical ubuntu linux +15 more +17 moreHeap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute...CVE-2015-3209Fix available7.5 High
- qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local...CVE-2014-0223Fix available4.6 Medium
- qemu, suse linux enterprise server +1 moreInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote...CVE-2014-0222Fix available7.5 High
- Show moreLoading…