Skip to contentQemu vulnerabilities
Newest
- qemu, [unknown] qemu:, canonical ubuntu linux +3 more +5 moreA flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in...CVE-2018-16872Fix available5.0 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +1 more +3 moreA flaw was found in qemu Media Transfer Protocol (MTP) before version 3.1.0. A path traversal in...CVE-2018-16867Fix available7.0 High
- qemu, opensuse leap +1 moreThe Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to...CVE-2018-19665Fix available5.7 Medium
- qemu, canonical ubuntu linux, debian linux +2 more +4 morehw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a...CVE-2018-19364Fix available5.5 Medium
- qemu, canonical ubuntu linux, opensuse leap +2 moreThe pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or...CVE-2018-18954Fix available5.5 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an...CVE-2018-18849Fix available5.5 Medium
- qemu, [unknown] qemu:, canonical ubuntu linux +2 moreAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...CVE-2018-16847Fix available7.0 High
- qemu, redhat enterprise linux, openstack +2 moreQemu has integer overflows because IOReadHandler and its associated functions use a signed...CVE-2018-18438Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer...CVE-2018-10839Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...CVE-2018-17963Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 moreQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...CVE-2018-17958Fix available7.5 High
- qemuqemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash...CVE-2018-15746Fix available5.5 Medium
- qemu, canonical ubuntu linux, redhat enterprise linux +2 moreA stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before...CVE-2017-15118Public exploitFix availableEPSS 11.9%8.3 High
- qemu, qemu qemu: +1 moreA stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the...CVE-2017-2630Fix available5.5 Medium
- qemu, redhat openstack, virtualization +2 moreAn assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD)...CVE-2017-7539Fix available5.3 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreqmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest...CVE-2018-12617Public exploitFix availableEPSS 24.6%7.5 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- qemu, canonical ubuntu linux, opensuse leap +6 more +8 moreQuick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows...CVE-2018-7858Fix available5.5 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local...CVE-2018-7550Fix available8.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreInteger overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a...CVE-2017-18043Fix available5.5 Medium
- qemu, debian linux +1 moreThe cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest...CVE-2017-18030Fix available4.4 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...CVE-2018-5683Fix available6.0 Medium
- qemuVNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to...CVE-2017-15124Fix available7.5 High
- qemu, debian linux +1 moreThe Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service ...CVE-2017-17381Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreThe Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a...CVE-2017-15119Fix available5.8 Medium
- qemu, canonical ubuntu linux, debian linux +2 morehw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration,...CVE-2017-16845Fix available10.0 Critical
- qemuThe mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged...CVE-2017-15289Fix available6.0 Medium
- qemuQemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data...CVE-2017-15268Fix available7.5 High
- qemuRace condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows...CVE-2017-15038Fix available5.6 Medium
- qemu, debian linux +1 moreInteger overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick...CVE-2017-14167Fix available8.8 High
- qemu, debian linux +1 moreUse-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator...CVE-2017-13711Fix available7.5 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest...CVE-2017-13672Public exploitFix available5.5 Medium
- qemuThe vga display update in mis-calculated the region for the dirty bitmap snapshot in case split...CVE-2017-13673Fix available6.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows...CVE-2017-12809Fix available6.5 Medium
- qemu, debian linux +1 moreThe address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local...CVE-2017-11334Fix available4.4 Medium
- qemu, debian linux +1 moreStack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest...CVE-2017-10806Fix available5.5 Medium
- qemu, debian linux +1 moreThe dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS...CVE-2017-11434Fix available5.5 Medium
- qemu, debian linux, redhat enterprise linux desktop +7 more +9 moreqemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to...CVE-2017-10664Fix available7.5 High
- qemu, debian linux +1 moreThe qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD)...CVE-2017-9524Fix available7.5 High
- qemuBuffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to...CVE-2017-8380Fix available9.8 Critical
- qemuQuick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs)...CVE-2017-7471Fix available9.0 Critical
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation...CVE-2017-9503Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local...CVE-2017-9375Fix available5.5 Medium
- qemuMemory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows...CVE-2017-9374Fix available5.5 Medium
- qemu, debian linux +1 moreMemory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows...CVE-2017-9373Fix available5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest...CVE-2017-9310Fix available5.6 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows...CVE-2017-9330Fix available5.6 Medium
- qemuMemory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick...CVE-2017-9060Fix available5.5 Medium
- qemu, debian linux +1 moreQuick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs)...CVE-2017-7493Fix available7.8 High
- Show moreLoading…