Skip to contentQemu vulnerabilities
Newest
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...CVE-2021-3930Fix available6.5 Medium
- qemu, fedoraproject fedora +1 moreAn out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw...CVE-2021-3638Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- qemu, debian linux +1 moreAn out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in...CVE-2021-3713Fix available7.4 High
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2....CVE-2021-3682Fix available8.5 High
- qemu, redhat enterprise linux +1 moreA stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A...CVE-2021-3611Fix available6.5 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior...CVE-2021-3608Fix available6.0 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in...CVE-2021-3607Fix available6.0 Medium
- qemu, debian linux +1 moreA flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs...CVE-2021-3582Fix available6.5 Medium
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3595Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3594Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3593Fix available3.8 Low
- libslirp project libslirp, qemu, debian linux +2 more +4 moreAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....CVE-2021-3592Fix available3.8 Low
- qemuA divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB...CVE-2020-27661Fix available6.5 Medium
- qemu, debian linux +1 moreA flaw was found in vhost-user-gpu of QEMU in versions up to and including 6.0. An out-of-bounds...CVE-2021-3546Fix available8.2 High
- qemu, debian linux +1 moreAn information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user...CVE-2021-3545Fix available6.5 Medium
- qemu, debian linux +1 moreSeveral memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in...CVE-2021-3544Fix available6.5 Medium
- qemu, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of...CVE-2020-35503Fix available6.0 Medium
- qemuA use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU...CVE-2020-35506Fix available6.7 Medium
- qemu, debian linux +1 moreA NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU...CVE-2020-35505Fix available4.4 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions...CVE-2020-35504Fix available6.0 Medium
- qemu, debian linux +1 moreA NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs...CVE-2021-20196Fix available6.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined...CVE-2021-3527Fix available5.5 Medium
- qemu, debian linux, redhat enterprise linux +2 moreA heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It...CVE-2021-3507Fix available6.1 Medium
- qemuIt was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access...CVE-2021-20295Fix available6.5 Medium
- qemu, debian linux, fedoraproject fedora +1 more +3 moreThe patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU...CVE-2021-3409Fix available5.7 Medium
- qemu, debian linux, fedoraproject fedora +2 moreA use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while...CVE-2021-3392Fix available3.2 Low
- qemu, debian linux, fedoraproject fedora +1 more +3 moreA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...CVE-2021-3416Fix available6.0 Medium
- qemu, debian linux +1 moreA stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device...CVE-2021-20255Fix available5.5 Medium
- qemuA flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new ...CVE-2021-20263Fix available3.3 Low
- qemu, debian linux, fedoraproject fedora +5 more +7 moreAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...CVE-2021-20257Fix available6.5 Medium
- qemu, debian linux, fedoraproject fedora +2 moreAn integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5...CVE-2021-20203Fix available3.2 Low
- qemu, debian linux, redhat enterprise linux +2 moreAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...CVE-2021-20221Fix available6.0 Medium
- qemu, debian linux +1 moreA race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2...CVE-2021-20181Fix available7.5 High
- qemuA flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared...CVE-2020-35517Fix available8.2 High
- qemu, debian linux +1 moreide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...CVE-2020-29443Fix available3.9 Low
- qemuIn QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in...CVE-2019-20808Fix available6.5 Medium
- qemu, debian linux +1 moreA flaw was found in the memory management API of QEMU during the initialization of a memory...CVE-2020-27821Fix available6.0 Medium
- qemu, debian linux +1 morehw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...CVE-2020-28916Fix available5.5 Medium
- qemu, debian linux +1 moreA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...CVE-2020-25723Fix available3.2 Low
- qemu, debian linux +1 moreeth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...CVE-2020-27617Fix available6.5 Medium
- qemuati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a...CVE-2020-27616Fix available6.5 Medium
- qemuAn issue was discovered in QEMU through 5.1.0. An out-of-bounds memory access was found in the...CVE-2020-24352Fix available5.5 Medium
- qemupci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because...CVE-2020-25742Fix available3.2 Low
- qemu, redhat enterprise linux, openstack platform +2 morehw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a...CVE-2020-25743Fix available3.2 Low
- qemufdctrl_write_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block...CVE-2020-25741Fix available3.2 Low
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.CVE-2020-25625Fix available5.3 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd...CVE-2020-25085Fix available5.0 Medium
- qemu, debian linux +1 moreQEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is...CVE-2020-25084Fix available3.2 Low
- qemu, debian linux +1 morehw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the...CVE-2020-25624Fix available5.0 Medium
- Show moreLoading…