Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/bochs@2.1.1%2B20041109-3sarge1
purl pkg:deb/debian/bochs@2.1.1%2B20041109-3sarge1
Next non-vulnerable version 2.3.7-1
Latest non-vulnerable version 2.3.7-1
Risk 3.2
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3xye-q9rz-p7es
Aliases:
CVE-2007-2893
Multiple vulnerabilities have been discovered in Bochs, possibly allowing for the execution of arbitrary code or a Denial of Service.
2.3.7-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-6ujq-6gej-d7ed Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability. CVE-2004-2372

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:36:20.249049+00:00 Debian Oval Importer Affected by VCID-3xye-q9rz-p7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:56:10.608227+00:00 Debian Oval Importer Fixing VCID-6ujq-6gej-d7ed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-12T00:09:25.767585+00:00 Debian Oval Importer Affected by VCID-3xye-q9rz-p7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:32:35.376656+00:00 Debian Oval Importer Fixing VCID-6ujq-6gej-d7ed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T23:40:29.624641+00:00 Debian Oval Importer Affected by VCID-3xye-q9rz-p7es https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:08:06.922763+00:00 Debian Oval Importer Fixing VCID-6ujq-6gej-d7ed https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0