Skip to contentQemu vulnerabilities
Newest
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC...CVE-2016-4002Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...CVE-2016-4037Fix available6.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when...CVE-2016-4001Fix available8.6 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- qemuStack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation...CVE-2015-5158Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...CVE-2016-2858Fix available6.5 Medium
- qemuThe cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does...CVE-2015-8818Fix available5.5 Medium
- qemuQEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a...CVE-2015-8817Fix available5.5 Medium
- qemu, canonical ubuntu linux +1 moreThe ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before...CVE-2016-2841Fix available6.0 Medium
- qemuMultiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2...CVE-2016-2538Fix available7.1 High
- qemu, canonical ubuntu linux +1 moreThe is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1...CVE-2016-2392Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows...CVE-2016-2391Fix available5.0 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null...CVE-2016-2198Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite...CVE-2016-1981Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is...CVE-2016-1922Fix available5.5 Medium
- qemu, oracle linux, redhat openstack +2 moreThe (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when...CVE-2016-1714Fix available8.1 High
- qemu, debian linux, redhat openstack +1 more +3 moreUse-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support...CVE-2016-1568Fix available8.8 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...CVE-2015-8745Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...CVE-2015-8744Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB...CVE-2015-8743Fix available7.1 High
- qemu, debian linux +1 moreHeap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.CVE-2015-8666Fix available7.9 High
- qemu, debian linux +1 moreStack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI...CVE-2015-8613Fix available6.5 Medium
- qemu, debian linux +1 moreThe Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service ...CVE-2015-8619Fix available7.5 High
- qemu, debian linux +1 moreMemory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows...CVE-2015-8568Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreMemory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory...CVE-2015-8567Fix available7.7 High
- qemu, debian linux +1 moreThe ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators...CVE-2015-8558Fix available5.5 Medium
- qemuThe MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS...CVE-2015-7549Fix available6.0 Medium
- qemu, debian linux +1 moreQemu, when built with VNC display driver support, allows remote attackers to cause a denial of...CVE-2015-8504Fix available6.5 Medium
- qemu, debian linux, redhat enterprise linux desktop +5 more +7 moreBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...CVE-2015-7512Fix available9.0 Critical
- qemu, debian linux, xen +2 moreHeap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest...CVE-2015-7504Fix available8.8 High
- qemu, debian linux +1 moreThe eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of...CVE-2015-8345Fix available6.5 Medium
- qemu, debian linux, fedoraproject fedora +2 morehw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or...CVE-2015-7295Fix available5.0 Medium
- qemuHeap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0...CVE-2015-5279Fix available7.2 High
- qemu, arista eos, canonical ubuntu linux +1 more +3 moreThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...CVE-2015-5278Fix available6.5 Medium
- qemu, arista eos, canonical ubuntu linux +4 more +6 morehw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...CVE-2015-6855Fix available7.5 High
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- qemu, arista eos, canonical ubuntu linux +5 more +7 moreInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...CVE-2015-5239Fix available6.5 Medium
- qemu, fedoraproject fedora, redhat openstack +2 moreBuffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU...CVE-2015-5225Fix available7.2 High
- qemu, arista eos, fedoraproject fedora +2 moreBuffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2...CVE-2015-5745Fix available6.5 Medium
- qemu, xen, fedoraproject fedora +4 more +6 moreHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...CVE-2015-5154Fix available7.2 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- qemu, canonical ubuntu linux, citrix xenserver +5 more +7 moreQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...CVE-2015-4106Fix available4.6 Medium
- qemuThe slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with...CVE-2015-4037Fix available1.9 Low
- qemu, debian linux +1 moreThe (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have...CVE-2014-9718Fix available4.9 Medium
- qemuHeap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2...CVE-2014-8106Fix available4.6 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu...CVE-2014-3689Fix available7.2 High
- Show moreLoading…