Search for packages
| purl | pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie |
| Next non-vulnerable version | 1:10.1.1+ds-1 |
| Latest non-vulnerable version | 1:10.2.2+ds-1 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-9szt-c829-zfdh
Aliases: CVE-2026-3196 |
qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation |
Affected by 0 other vulnerabilities. |
|
VCID-detn-3zsq-3qh7
Aliases: CVE-2026-3195 |
qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for CVE-2024-7730) |
Affected by 0 other vulnerabilities. |
|
VCID-m47q-17n6-t7gg
Aliases: CVE-2026-2243 |
qemu-kvm: Heap buffer out-of-bounds read in VMDK compressed grain parsing |
Affected by 0 other vulnerabilities. |
|
VCID-n71j-fz74-kyhf
Aliases: CVE-2024-8354 |
qemu-kvm: usb: assertion failure in usb_ep_get() |
Affected by 0 other vulnerabilities. Affected by 4 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vcun-y6d5-6uby
Aliases: CVE-2026-3842 |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-128s-h48m-6bbs | QEMU: NVMe: out-of-bounds memory access in nvme_sriov_pre_write_ctrl() |
CVE-2024-26328
|
| VCID-145f-vwpy-ukfg | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-7039
|
| VCID-14d3-jbv3-xbbe | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-10761
|
| VCID-178f-fkk3-1ugx | Qemu: audio: memory leakage in es1370 device |
CVE-2017-5526
|
| VCID-186h-76t5-3fdd | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3947
|
| VCID-1ar2-w4tr-3yfz | qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() |
CVE-2015-5239
|
| VCID-1c93-u2ze-jyg9 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7994
|
| VCID-1erd-fd8p-hqch | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-13672
|
| VCID-1g7f-6q39-fyhx | Multiple vulnerabilities have been found in libslirp, the worst of which could result in a Denial of Service condition. |
CVE-2021-3593
|
| VCID-1hxu-54ft-9uf3 | qemu guest agent (qga) insecure file permissions |
CVE-2013-2007
|
| VCID-1wst-y74g-gqb5 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-1714
|
| VCID-25bh-a224-2kb9 | A heap-based buffer overflow in QEMU could result in execution of arbitrary code. |
CVE-2015-5158
|
| VCID-265c-bbfk-skf3 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5898
|
| VCID-272j-638s-xkb7 | Qemu: VNC: memory corruption due to unchecked resolution limit |
CVE-2017-2633
|
| VCID-285u-bk7z-sybs | PCI MSI mask bits inadvertently exposed to guests |
CVE-2015-4104
|
| VCID-28wt-9aqz-xqbg | qemu: OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c |
CVE-2020-12829
|
| VCID-29bt-r6ya-jfhu | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-20263
|
| VCID-29d8-uet3-syfh | QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure |
CVE-2020-11947
|
| VCID-2usm-cp15-3ufb | security update |
CVE-2014-3689
|
| VCID-2xw8-382x-93gm | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0223
|
| VCID-2ywm-rb9g-x3fr | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-10028
|
| VCID-2zu7-zb7a-bqfq | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4439
|
| VCID-32c4-eqrz-cfd5 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9101
|
| VCID-32jy-dr7t-2uas | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2018-20815
|
| VCID-33hx-334p-myag | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8576
|
| VCID-33jn-mjmh-7fc2 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-7512
|
| VCID-3b1c-4jap-w7hu | security update |
CVE-2015-4037
|
| VCID-3bm8-mnjj-qkd8 | qemu: virtio-net: out-of-bounds buffer write on invalid state load |
CVE-2013-4150
|
| VCID-3ew5-8dfe-u3d8 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2023-1544
|
| VCID-3jeq-fwjy-c7gg | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0142
|
| VCID-3kyg-9mf3-kfft | qemu-kvm: 'qemu-img info' leads to host file read/write |
CVE-2024-4467
|
| VCID-3nny-89d4-qyen | qemu: virtio: buffer overrun on incoming migration |
CVE-2013-6399
|
| VCID-3qwz-gg8s-2ugm | QEMU: VGA: reachable assert failure during display update |
CVE-2017-13673
|
| VCID-3ssm-58pn-tubb | qemu/kvm/xen: qemu block format auto-detection vulnerability |
CVE-2008-2004
|
| VCID-3wee-2xay-r7bt | QEMU: block: fdc: null pointer dereference may lead to guest crash |
CVE-2021-20196
|
| VCID-3yb2-bx65-1yaa | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-6815
|
| VCID-3zgd-7juv-43aw | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-7471
|
| VCID-4276-jfy3-h3ck | security update |
CVE-2018-10839
|
| VCID-46n7-vgn3-nffj | Qemu: scsi: megasas: null pointer dereference while processing megasas command |
CVE-2017-9503
|
| VCID-4848-dnv8-bqez | QEMU: use-after-free in TCG accelerator can lead to local privilege escalation |
CVE-2020-24165
|
| VCID-4d66-e766-q7ch | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13253
|
| VCID-4mkn-nd4b-huhh | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-7718
|
| VCID-4p7u-m587-vyhd | qemu/kvm: remote DoS (infinite loop) via specially-crafted VNC message received by the domain |
CVE-2008-2382
|
| VCID-4s1w-v1qs-9uhp | blkif responses leak backend stack data |
CVE-2017-10911
XSA-216 |
| VCID-4s6a-mart-pba2 | virtio: unbounded memory allocation issue |
CVE-2016-5403
XSA-184 |
| VCID-4unz-8jyy-qfdc | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-4206
|
| VCID-4xv9-ahxv-tuh1 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2392
|
| VCID-542n-bbu2-dyfc | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-7377
|
| VCID-55q4-p9np-kkh6 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-7493
|
| VCID-56ng-2tm1-5qhk | QEMU: seccomp: blacklist is not applied to all threads |
CVE-2018-15746
|
| VCID-58zn-pycb-qqfy | qemu: ahci: fix buffer overrun on invalid state load |
CVE-2013-4526
|
| VCID-5fe5-865e-qbhm | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0147
|
| VCID-5fu6-gkdc-sfhq | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7908
|
| VCID-5n4a-ahzv-8uev | qemu: virtio: insufficient validation of num_sg when mapping |
CVE-2013-4535
|
| VCID-5t1d-ve8h-9ba1 | QEMU: division by zero in oss_write() in audio/ossaudio.c |
CVE-2020-14415
|
| VCID-5t1j-7uf3-gyde | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2017-6058
|
| VCID-5t1t-w2j6-pfay | security update |
CVE-2014-8106
|
| VCID-5ur6-6ec3-p7bt | Multiple vulnerabilities have been found in libslirp, the worst of which could result in a Denial of Service condition. |
CVE-2021-3592
|
| VCID-5xgg-2mh6-gfg1 | security update |
CVE-2018-16872
|
| VCID-5xxx-u1x4-dfah | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9908
|
| VCID-5zfh-ajn1-fqbb | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9911
|
| VCID-69fs-q8fc-ebcv | Qemu: vhdx: bounds checking for block_size and logical_sector_size |
CVE-2014-0148
|
| VCID-6dnf-5681-5yau | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2016-1568
|
| VCID-6ef4-c38a-j7ca | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13362
|
| VCID-6fs3-3a9w-xycq | QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets |
CVE-2020-29130
|
| VCID-6gwe-z5t5-7ff3 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5106
|
| VCID-6hqu-ecs5-zqeb | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13361
|
| VCID-6k55-s19q-2yfm | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0222
|
| VCID-6me7-srq7-6bfd | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-7116
|
| VCID-6pkj-axqp-duf1 | Multiple vulnerabilities have been found in libslirp, the worst of which could result in a Denial of Service condition. |
CVE-2021-3595
|
| VCID-6qnt-yaa3-p3bb | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-35506
|
| VCID-6u6t-75dg-xybn | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-2894
|
| VCID-6u8x-4sqe-ckbp | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0146
|
| VCID-6xcc-y2jp-nufx | QEMU: net: triggerable assertion due to race condition in hot-unplug |
CVE-2023-3301
|
| VCID-71c3-j5z5-kqbf | Qemu: scsi: megasas: stack information leakage while reading configuration |
CVE-2016-5105
|
| VCID-72b8-m9rg-u7a4 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8558
|
| VCID-77re-jhdj-syg6 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9776
|
| VCID-7cbd-jf8n-3fhx | QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion |
CVE-2022-3165
|
| VCID-7frw-3rxw-gubf | QEMU: local privilege escalation via the QEMU Guest Agent on Windows |
CVE-2023-0664
|
| VCID-7gt7-r3j9-cbb3 | A heap-based buffer overflow in QEMU could result in execution of arbitrary code. |
CVE-2015-3214
|
| VCID-7kwv-37jf-sfe9 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-7421
|
| VCID-7mhs-m1r3-n3ag | QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service |
CVE-2023-3354
|
| VCID-7q7c-4788-j3a5 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5579
|
| VCID-7qeu-nkee-1ua4 | QEMU Buffer overflow via crafted "net socket listen" option |
CVE-2007-5730
|
| VCID-7r2x-vm78-gkb3 | QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks |
CVE-2016-3710
|
| VCID-7rh3-6w55-sqat | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-1981
|
| VCID-7w6v-ewcn-kkdz | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3416
|
| VCID-7w8v-hby8-dya5 | security update |
CVE-2018-17958
|
| VCID-7yen-c1mv-wba9 | qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories. |
CVE-2008-4553
|
| VCID-7zkh-xs1s-guh6 | QEMU: slirp: networking out-of-bounds read information disclosure vulnerability |
CVE-2020-10756
|
| VCID-83as-9f42-6ubf | qemu disk backend (qdisk) resource leak |
CVE-2013-4375
|
| VCID-8822-6d2n-x7a6 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8909
|
| VCID-88ef-174t-tbdr | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5667
|
| VCID-895c-wwg8-cbe5 | Cirrus VGA Heap overflow via display refresh |
CVE-2016-9603
XSA-211 |
| VCID-8cnu-b5en-7ye3 | qemu: integer overflow in ati_2d_blt() in hw/display/ati-2d.c could lead to DoS |
CVE-2020-11869
|
| VCID-8jjd-u5mc-zbde | qemu: scsi: lsi: potential infinite loop when executing script in lsi_execute_script |
CVE-2019-12068
|
| VCID-8kzh-2gr5-e7gu | QEMU: out-of-bounds read in ati_cursor_define() function in hw/display/ati.c leads to DoS |
CVE-2019-20808
|
| VCID-8mht-ekbe-kfaz | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-3461
|
| VCID-8mqa-mg3j-y3bz | qemu-kvm: net: assertion failure in update_sctp_checksum() |
CVE-2024-3567
|
| VCID-8pkj-jwhg-3ub7 | Use after free in QEMU/Xen block unplug protocol |
CVE-2015-5166
|
| VCID-8q9q-fs5n-gyfj | Privilege escalation via emulated floppy disk drive |
CVE-2015-3456
|
| VCID-8tn1-kvxa-m3ex | QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks |
CVE-2016-3712
|
| VCID-8xrw-2nz9-wkap | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2013-4544
|
| VCID-91jh-3mv7-yuga | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7466
|
| VCID-91y7-ceje-jbd3 | QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure |
CVE-2024-7409
|
| VCID-93gr-c812-uud8 | QEMU: sdhci: out-of-bounds access issue while doing multi block SDMA |
CVE-2020-25085
|
| VCID-955d-q41q-4uau | QEMU: net: an assert failure via eth_get_gso_type |
CVE-2020-27617
|
| VCID-999y-j12v-97eu | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-6888
|
| VCID-9fxe-ys62-n7br | qemu: virtio: out-of-bounds config space access |
CVE-2013-2016
|
| VCID-9p62-abss-v7c2 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7423
|
| VCID-9rpr-g2sm-yqb6 | QEMU: pvrdma: null dereference or excessive memory allocation when creating QP/CQ |
CVE-2018-20125
|
| VCID-9y9j-84tz-fbfy | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4002
|
| VCID-9zeb-77t6-57cx | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4001
|
| VCID-9zjg-8t8b-a3ed | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8556
|
| VCID-a243-xqn6-2ugc | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-6490
|
| VCID-a4jx-4hpe-3kcy | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-6834
|
| VCID-aa98-tyaq-3kew | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2197
|
| VCID-ab2e-uu8h-7qhx | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9914
|
| VCID-abv3-4vrs-j3fp | Qemu: qemu-nbd crashes due to undefined I/O coroutine |
CVE-2017-7539
|
| VCID-ac7j-emx5-v7cn | security update |
CVE-2017-9524
|
| VCID-ae2t-gh49-a7ea | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-6836
|
| VCID-aeh3-vzax-jqfh | cirrus_bitblt_cputovideo does not check if memory region is safe |
CVE-2017-2620
XSA-209 |
| VCID-ahbr-2z8t-qqb6 | QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) |
CVE-2023-2680
|
| VCID-ajxn-xuzk-2qez | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-8112
|
| VCID-ap2r-g7ew-kqed | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3544
|
| VCID-ar73-za25-zkav | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2016-10155
|
| VCID-atzs-876n-byg6 | security update |
CVE-2017-15268
|
| VCID-awu8-fjd8-2udk | qemu SCSI REPORT LUNS buffer overflow |
CVE-2013-4344
|
| VCID-awuj-67u6-cua1 | QEMU: NVMe: out-of-bounds read information disclosure vulnerability |
CVE-2023-4135
|
| VCID-awup-6h5b-uydc | Potential unintended writes to host MSI message data field via qemu |
CVE-2015-4103
|
| VCID-axzq-sq7f-7yau | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9923
|
| VCID-b2wb-y2qf-afh7 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9913
|
| VCID-b7v6-247j-kfcs | security update |
CVE-2019-12155
|
| VCID-b89y-32z3-sbdu | qemu-kvm: QEMU SR-IOV Migration Inconsistency |
CVE-2025-54566
|
| VCID-baa4-an7u-p7gm | qemu: virtio: out-of-bounds buffer write on invalid state load |
CVE-2013-4151
|
| VCID-bbmg-x8h6-67e5 | security update |
CVE-2017-11334
|
| VCID-bcps-uatt-wkd7 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3527
|
| VCID-be1r-pq33-abg5 | QEMU: pvrdma: uar_read leads to NULL dereference |
CVE-2018-20191
|
| VCID-be7r-u46j-pbdd | QEMU: esp: integer underflow leads to heap buffer overflow in esp_do_nodma() |
CVE-2024-24474
|
| VCID-bj4j-2yxz-pyeh | security update |
CVE-2017-15038
|
| VCID-bnve-337x-4ya9 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9102
|
| VCID-bq4s-ner8-9bew | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-8309
|
| VCID-bqnq-bar5-nfgr | Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process |
CVE-2016-4037
|
| VCID-br22-63gw-uuee | qemu/kvm/xen: add image format options for USB storage and removable media |
CVE-2008-1945
|
| VCID-br4x-bpvj-puhr | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3608
|
| VCID-brbd-uyhx-gkfs | xen icebp instruction issue |
CVE-2007-1322
|
| VCID-brxx-13mt-dqa2 | qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback |
CVE-2025-8860
|
| VCID-burb-pa38-fqhw | QEMU: vnc: memory leakage upon disconnect |
CVE-2019-20382
|
| VCID-bwhb-8bga-5ueh | Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service. |
CVE-2014-7815
|
| VCID-bx3b-281e-wfb2 | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0145
|
| VCID-bz27-8gdr-xue7 | Qemu VT100 emulation vulnerability |
CVE-2012-3515
|
| VCID-c4ky-b4y8-kqd5 | QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c |
CVE-2020-27661
|
| VCID-c834-hdmj-cfe1 | security update |
CVE-2017-9374
|
| VCID-cenj-mz55-jbg6 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3929
|
| VCID-cfuf-q9r3-bbab | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5107
|
| VCID-cgq2-b6my-eucg | QEMU: lsi53c895a: DMA reentrancy issue leads to stack overflow |
CVE-2023-0330
|
| VCID-chjc-4r36-y3f8 | security update |
CVE-2017-11434
|
| VCID-cjym-w2zs-2fae | qemu: virtio-net: out-of-bounds buffer write on load |
CVE-2013-4149
|
| VCID-cmqc-g49c-wbeq | Qemu: bt: Integer overflow in Bluetooth routines allows memory corruption |
CVE-2018-19665
|
| VCID-cnyg-wvxr-gqg3 | QEMU: sdhci: heap buffer overflow in sdhci_write_dataport() |
CVE-2024-3447
|
| VCID-cr8f-zaj3-mkg5 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-5225
|
| VCID-ctp4-ekzn-rycw | Qemu: OOB access in address_space_rw leads to segmentation fault |
CVE-2015-8817
|
| VCID-cy79-xgar-eqgr | security update |
CVE-2018-18849
|
| VCID-cyp8-huxa-dfa7 | qemu: openpic: buffer overrun on incoming migration |
CVE-2013-4534
|
| VCID-d2ve-dnmj-4bbz | qemu-kvm: VNC WebSocket handshake use-after-free |
CVE-2025-11234
|
| VCID-d5vs-qw4m-ryes | Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy |
CVE-2016-9922
|
| VCID-d6gd-j7ks-xkgk | security update |
CVE-2019-15890
|
| VCID-d8cd-qgg7-fyed | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-16845
|
| VCID-d9vv-kpna-fyem | QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() |
CVE-2023-6683
|
| VCID-df7x-jg6v-1kcg | Qemu: scsi: pvscsi: out-of-bounds access issue in pvsci_ring_init_msg/data routines |
CVE-2016-4952
|
| VCID-dghq-fzs2-xfem | Qemu: hw: dma: divide by zero error in set_next_tick |
CVE-2016-8667
|
| VCID-dgzy-z4ad-ubc4 | security update |
CVE-2018-19489
|
| VCID-dhgj-d3h1-cue7 | heap buffer overflow vulnerability in pcnet emulator |
CVE-2015-7504
|
| VCID-dqbd-gqg9-2kgs | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13754
|
| VCID-drpd-g9w1-t7ad | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9915
|
| VCID-drqf-646q-xqf3 | qemu: out-of-bound heap buffer access via an interrupt ID field |
CVE-2021-20221
|
| VCID-dthd-mp8z-8ucg | QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP) |
CVE-2018-16867
|
| VCID-du84-jfqv-q3hu | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9845
|
| VCID-dwwd-5p11-u3ht | qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash |
CVE-2024-4693
|
| VCID-e1j4-fhej-23hp | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2017-2630
|
| VCID-e2th-bfpw-jfcz | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8578
|
| VCID-e3xt-vft1-kbbe | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-18030
|
| VCID-e4ye-8pbq-sucb | security update |
CVE-2014-9718
|
| VCID-e99n-gc79-cqcy | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-11102
|
| VCID-eb18-wa2w-q7bn | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3682
|
| VCID-ecu9-p9zb-dugs | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2017-5987
|
| VCID-ecy5-s73b-n3db | security update |
CVE-2017-10664
|
| VCID-eebn-62j9-rke5 | qemu: pxa2xx: buffer overrun on incoming migration |
CVE-2013-4533
|
| VCID-een8-8kc5-qfcx | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3546
|
| VCID-efs2-ads8-mkan | qemu-kvm: Stack buffer overflow in e1000 device via short frames in loopback mode |
CVE-2025-12464
|
| VCID-egyg-bbm9-8qea | QEMU: slirp: use-after-free in ip_reass() function in ip_input.c |
CVE-2020-1983
|
| VCID-ej5p-r4az-6ud2 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-4144
|
| VCID-emwq-6wqz-h7et | qemu-kvm: QEMU SR-IOV Enable Mask Vulnerability |
CVE-2025-54567
|
| VCID-eqp6-raqc-dkch | qemu: 9pfs: TOCTOU privilege escalation vulnerability |
CVE-2021-20181
|
| VCID-eqw6-1x15-jqb9 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8577
|
| VCID-eu1x-b3tw-dyfh | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8345
|
| VCID-eu39-te5g-dyf9 | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-9602
|
| VCID-ewb7-nrtu-g7ex | QEMU: virtio: DMA reentrancy issue leads to double free vulnerability |
CVE-2024-3446
|
| VCID-ewsp-7ydm-5ub3 | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2019-13164
|
| VCID-ezm8-pq4d-mkhg | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13800
|
| VCID-ezt6-c9hq-m3aq | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7909
|
| VCID-f2fx-sqtp-8yhe | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-0216
|
| VCID-f4sq-73vu-sfdq | QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() |
CVE-2023-3019
|
| VCID-f4w9-adpm-tuht | security update |
CVE-2018-17963
|
| VCID-fcgm-hbbm-qyhj | Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference |
CVE-2016-2391
|
| VCID-fenu-d57d-cbgj | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0150
|
| VCID-ffd9-9wm1-rffs | Multiple vulnerabilities have been found in libslirp, the worst of which could result in a Denial of Service condition. |
CVE-2021-3594
|
| VCID-fp83-zgum-ryb8 | security update |
CVE-2017-15119
|
| VCID-fucx-q3j9-qkat | QEMU: pvrdma: infinite loop in pvrdma_qp_send/recv |
CVE-2018-20216
|
| VCID-fuec-b5hj-s3e8 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-6833
|
| VCID-fz7q-bmz2-73gj | qemu: pl022: fix buffer overun on invalid state load |
CVE-2013-4530
|
| VCID-fzn9-nn4a-3ffj | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0143
|
| VCID-g3p8-5y7v-1ubk | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7907
|
| VCID-g3ss-8y7t-m7ap | Guest triggerable qemu MSI-X pass-through error messages |
CVE-2015-4105
|
| VCID-g4az-63th-yyhk | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-4145
|
| VCID-g7vj-24gg-uka5 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8744
|
| VCID-g9zx-1a2t-w7ae | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2013-4377
|
| VCID-gagc-4hh8-hkhb | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2017-5973
|
| VCID-gc6n-kgsc-f3b6 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-35505
|
| VCID-ghre-ztj1-nbhh | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2841
|
| VCID-gjq3-asym-bqat | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8568
|
| VCID-gkjb-rfp5-eye6 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4453
|
| VCID-gmvt-jepe-mugb | qemu-kvm: pcie: improper validation of NumVFs leads to buffer overflow |
CVE-2024-26327
|
| VCID-gmvy-m5mq-yycx | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-17381
|
| VCID-gn2n-q1pj-3qcg | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2015-8619
|
| VCID-gntc-n53u-n3aj | security update |
CVE-2018-18954
|
| VCID-gqtx-g1cs-6ybn | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-8608
|
| VCID-gww6-vxca-fkhf | qemu: virtio: insufficient validation of num_sg when mapping |
CVE-2013-4536
|
| VCID-gysr-zvcz-1yfm | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9907
|
| VCID-h22r-c3az-3fa3 | An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 (the size of a sector). NOTE: a member of the QEMU security team disputes the significance of this issue because a "privileged guest user has many ways to cause similar DoS effect, without triggering this assert. |
CVE-2019-20175
|
| VCID-h2ap-vhnd-gbcb | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8743
|
| VCID-h526-pk3x-xfb7 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-1779
|
| VCID-h5np-qw7r-j7cy | qemu: hw/pci/pcie_aer.c: buffer overrun on invalid state load |
CVE-2013-4529
|
| VCID-h5sc-3zrc-23dn | QEMU: loader: OOB access while loading registered ROM may lead to code execution |
CVE-2020-13765
|
| VCID-h8p1-s41k-t3dd | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4441
|
| VCID-hkf8-96k7-kuc9 | qemu-kvm: Unbounded allocation in virtio-crypto |
CVE-2025-14876
|
| VCID-hq1b-c1ew-kkga | QEMU: ati-vga: potential crash via invalid x y parameter values |
CVE-2020-27616
|
| VCID-hqnb-2gxt-rke6 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-5745
|
| VCID-hrhp-htnd-7bbx | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3607
|
| VCID-hu58-m2w7-qkeu | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8910
|
| VCID-hvky-8ja9-rye5 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9103
|
| VCID-hwt1-11ew-sqhv | security update |
CVE-2018-19364
|
| VCID-hzqy-an17-sufx | qemu: zaurus: buffer overrun on invalid state load |
CVE-2013-4540
|
| VCID-j11x-bba3-zkdj | QEMU: ppc64: sPAPR emulator leaks the host hardware identity |
CVE-2019-8934
|
| VCID-j1gy-ttz5-1yct | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2022-26353
|
| VCID-j6hs-wm45-s3ej | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-20257
|
| VCID-j84y-1e8t-3ygv | oob access in cirrus bitblt copy |
CVE-2017-2615
XSA-208 |
| VCID-j8b1-ua84-nufe | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5126
|
| VCID-j8gw-y7cy-wkdh | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-7161
|
| VCID-j9w4-jjad-puhm | Unmediated PCI register access in qemu |
CVE-2015-4106
|
| VCID-jdmp-aggh-ufhy | QEMU: NULL pointer dereference in hw/sparc64/sun4u.c leading to DoS |
CVE-2019-5008
|
| VCID-jhdu-5znk-cffu | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5337
|
| VCID-jkk4-3w76-5kha | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-8086
|
| VCID-jmca-kswb-1beq | QEMU: ati-vga: inconsistent check in ati_2d_blt() may lead to out-of-bounds write |
CVE-2021-3638
|
| VCID-jnxy-g6wu-8ubu | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2018-5683
|
| VCID-jq6v-ra9m-sqgz | QEMU: cirrus: OOB access when updating VGA display |
CVE-2018-7858
|
| VCID-juek-f6et-x7eb | QEMU: e1000e: infinite loop scenario in case of null packet descriptor |
CVE-2020-28916
|
| VCID-jz9n-rjmp-y3bk | Multiple vulnerabilities were found in qemu-kvm, allowing attackers to execute arbitrary code. |
CVE-2012-2652
|
| VCID-k217-fje9-9bas | Qemu: scsi: esp: OOB write access in esp_do_dma |
CVE-2016-6351
|
| VCID-k2hn-s3df-3udm | Qemu: OOB access in address_space_rw leads to segmentation fault |
CVE-2015-8818
|
| VCID-kcqg-23j8-bqaa | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9104
|
| VCID-kdxa-1nm8-mbau | security update |
CVE-2014-3615
|
| VCID-ke54-4uc4-rkbs | qemu: hw/display/bochs-display.c does not ensure a sufficient PCI config space allocation leading to a buffer overflow involving the PCIe extended config space |
CVE-2019-15034
|
| VCID-km1b-1rvd-q3fa | security update |
CVE-2017-10806
|
| VCID-kngg-3rup-u3gf | QEMU: am53c974: denial of service due to division by zero |
CVE-2023-42467
|
| VCID-ku9y-24pu-g7gz | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-5279
|
| VCID-kvww-v5vg-qbdt | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5578
|
| VCID-kwra-y7vr-ykdg | Qemu: Integer overflow in ccid_card_vscard_read() allows memory corruption |
CVE-2018-18438
|
| VCID-kx81-eex4-hug8 | QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() |
CVE-2023-6693
|
| VCID-m549-2ra5-2fct | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2198
|
| VCID-m7uv-6346-8kbq | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-7980
|
| VCID-m828-1szt-hfb6 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9912
|
| VCID-maj1-5zy9-qyab | qemu ioport array overflow |
CVE-2016-9637
|
| VCID-mb65-h728-fbfj | Qemu: 9pfs: memory leakage in v9fs_write |
CVE-2016-9106
|
| VCID-mgn9-kzp9-wke5 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5552
|
| VCID-mn7m-an9j-yucj | QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c |
CVE-2020-27821
|
| VCID-mtj9-1cns-yybw | QEMU: MMIO ops null pointer dereference may lead to DoS |
CVE-2020-15469
|
| VCID-mvy2-32gt-nbhg | Multiple vulnerabilities have been found in QEMU, the worst of which could the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2017-6505
|
| VCID-mxap-kdu5-akh9 | xen QEMU NE2000 emulation issues |
CVE-2007-1321
|
| VCID-mzsa-tcqf-effc | security update |
CVE-2019-6778
|
| VCID-n3ak-wnk9-3uef | Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service. |
CVE-2014-5388
|
| VCID-nb4k-f7rm-kuhg | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3582
|
| VCID-ncpf-ttuc-fqe7 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-9060
|
| VCID-ne4d-zj65-qkgx | QEMU: fdc: heap buffer overflow in DMA read data transfers |
CVE-2021-3507
|
| VCID-nft4-p36q-abcq | qemu: hpet: buffer overrun on invalid state load |
CVE-2013-4527
|
| VCID-nhc4-1zw4-mfgq | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2538
|
| VCID-njfq-vdgj-wfc8 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-6855
|
| VCID-nuwe-tupt-wfhg | QEMU: usb: hcd-ohci: infinite loop issue while processing transfer descriptors |
CVE-2020-25625
|
| VCID-nzsp-vjgp-hqcq | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-2962
|
| VCID-p1bu-wmxq-27dm | security update |
CVE-2017-14167
|
| VCID-p2dz-mtns-5bb4 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2023-2861
|
| VCID-p2we-9qfu-17eb | QEMU: usb: use-after-free issue while setting up packet |
CVE-2020-25084
|
| VCID-p5qs-eaj5-4bax | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-7549
|
| VCID-phfy-zv23-sqcr | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-1711
|
| VCID-prnz-8kk8-fkhj | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8666
|
| VCID-ptty-88p4-ybe9 | qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS |
CVE-2024-6505
|
| VCID-pxjg-chmx-nkdc | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-35414
|
| VCID-q38v-9gvs-sydf | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3545
|
| VCID-q49g-ggaf-cqbt | security update |
CVE-2017-13711
|
| VCID-q63s-qmb1-4yd8 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-7156
|
| VCID-qejd-5dkk-muhc | QEMU: pvrdma: memory leakage in device hotplug |
CVE-2018-20123
|
| VCID-qf88-kz3p-1kd4 | Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities. |
CVE-2009-3616
|
| VCID-qh2s-apkz-sbaz | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-35504
|
| VCID-qjf9-yvjp-tqef | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9846
|
| VCID-qmvu-n11p-skg5 | qemu: target-arm/machine.c: fix buffer overflow on invalid state load |
CVE-2013-4531
|
| VCID-qn73-3gkb-rkbm | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3930
|
| VCID-qs61-1esc-c3cz | QEMU: improper IDE controller reset can lead to MBR overwrite |
CVE-2023-5088
|
| VCID-qtkd-pv6z-pkdf | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5931
|
| VCID-r47h-wdgy-7bga | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3748
|
| VCID-r4z8-mhwj-qyhp | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9921
|
| VCID-r51r-u7mq-93cy | QEMU: scsi: mptsas: use-after-free while processing io requests |
CVE-2021-3392
|
| VCID-r7hp-ht55-5qgr | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2014-0144
|
| VCID-rc5s-peqy-z3ag | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5238
|
| VCID-rcec-z3z9-guhk | Qemu: net: out of bounds read in net_checksum_calculate() |
CVE-2016-2857
|
| VCID-rdgu-3kat-j7c6 | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2019-9824
|
| VCID-re83-uvh8-5bgq | QEMU: out-of-bounds read/write in ati-vga device emulation in ati_2d_blt() |
CVE-2020-24352
|
| VCID-rfgr-472m-kues | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-1922
|
| VCID-rkxf-jp2j-mqgf | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-15124
|
| VCID-rn8r-n2e6-ffgx | qemu: off-by-one error in monitor.c causing VNC passwords to be truncated after 7th character |
CVE-2008-5714
|
| VCID-ruzy-eqc8-5ubs | security update |
CVE-2019-14378
|
| VCID-rvs5-s55e-9ueb | qemu: weak signature generation in Pointer Authentication support for ARM |
CVE-2020-10702
|
| VCID-rwea-a658-bfbm | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8567
|
| VCID-rxsw-t1ut-rkau | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2017-18043
|
| VCID-rz5x-q1ne-53he | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2020-14394
|
| VCID-s6a5-z2kn-wyh3 | kvm/qemu/xen: Incomplete upstream fix for CVE-2007-1320 |
CVE-2008-4539
|
| VCID-sbgh-r39n-6fdm | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4020
|
| VCID-sjv5-2q9u-v7ax | QEMU NE2000 Buffer overflow triggerable by frames larger than MTU |
CVE-2007-5729
|
| VCID-snv6-47g2-4qcc | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-7422
|
| VCID-ssft-w1t3-9kc9 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5856
|
| VCID-sy57-hngf-d3gn | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13791
|
| VCID-szgx-8849-wud2 | qemu-kvm: Heap off-by-one in KVM Xen PHYSDEVOP_map_pirq |
CVE-2026-0665
|
| VCID-t2y3-nbz8-jqa7 | QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets |
CVE-2020-29129
|
| VCID-t44w-g1ys-47e6 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-15859
|
| VCID-t58m-9jqp-43c9 | qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb() |
CVE-2024-7730
|
| VCID-t5gq-4bhn-gkej | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3611
|
| VCID-t6cq-kfkw-wbch | QEMU: virtio-crypto: heap buffer overflow in virtio_crypto_sym_op_helper() |
CVE-2023-3180
|
| VCID-tagr-5fpf-4bcj | Heap overflow in QEMU PCNET controller, allowing guest->host escape |
CVE-2015-3209
|
| VCID-takm-jn93-eqgb | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-1050
|
| VCID-tbgk-fwbt-cqa3 | qemu: ccid: buffer overflow in handling of VSC_ATR message |
CVE-2011-4111
|
| VCID-th6r-zg29-gfga | qemu-nbd format-guessing due to missing format specification |
CVE-2013-1922
|
| VCID-tk7k-71bb-97hh | QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c |
CVE-2020-25723
|
| VCID-tsyt-eq3x-5ucy | security update |
CVE-2018-12617
|
| VCID-tyav-15aq-a7ck | Qemu insufficient block device address range checking |
CVE-2008-0928
|
| VCID-tyv8-tzu8-23fj | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-35517
|
| VCID-u1wj-9rfp-wyea | QEMU: pvrdma: memory leakage when creating cq/qp |
CVE-2018-20126
|
| VCID-u241-wxh3-nfd5 | qemu: virtio-net: buffer overflow on invalid state load |
CVE-2013-4148
|
| VCID-u6pc-5g76-qkdh | Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service. |
CVE-2014-3471
|
| VCID-u721-b7ct-ryby | xen aam instruction crash |
CVE-2007-1366
|
| VCID-u9km-qptr-hqck | Unmediated PCI command register access in qemu |
CVE-2015-2756
|
| VCID-ucq7-rbw9-efc2 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-5278
|
| VCID-ud3x-68yc-rkfk | qemu: virtio: out-of-bounds buffer write on state load with invalid config_len |
CVE-2014-0182
|
| VCID-ueqe-vzgb-r7fk | Multiple vulnerabilities have been found in QEMU, the worst of which could result in execution of arbitrary code or Denial of Service. |
CVE-2014-7840
|
| VCID-ueu8-w641-duh3 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-4158
|
| VCID-uj5n-mck2-2uen | QEMU: privilege escalation via disas_insn function in TCG mode |
CVE-2017-8284
|
| VCID-ujfw-wu9c-2ff3 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8669
|
| VCID-urmg-aapm-h3eg | qemu: ssi-sd: buffer overrun on invalid state load |
CVE-2013-4537
|
| VCID-uryz-5yk9-9fd7 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow an attacker to execute arbitrary code. |
CVE-2018-7550
|
| VCID-us1d-sdm8-sbh6 | paravirtualized drivers incautious about shared memory contents |
CVE-2015-8550
|
| VCID-uwej-s4h2-wfhv | Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation |
CVE-2016-6835
|
| VCID-uwrh-tpz4-17g2 | qemu: stellaris_enet: buffer overrun on incoming migration |
CVE-2013-4532
|
| VCID-uyct-zk7n-sbcz | QEMU heap overflow flaw while processing certain ATAPI commands. |
CVE-2015-5154
|
| VCID-uza6-bqkx-hugw | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-7157
|
| VCID-uzxc-npak-yyc4 | QEMU: net: eepro100: stack overflow via infinite recursion |
CVE-2021-20255
|
| VCID-v4eq-3kfm-uug9 | security update |
CVE-2017-9373
|
| VCID-v8fp-rzfq-e3bs | Information leak via side effects of speculative execution |
CVE-2017-5715
|
| VCID-v9sz-kcrs-qqeu | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4964
|
| VCID-vawn-m828-47fe | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-4454
|
| VCID-vbq6-qtub-ffbg | QEMU: rdma: OOB access when building scatter-gather array |
CVE-2018-20124
|
| VCID-vdc6-h9wp-fkgw | security update |
CVE-2014-3640
|
| VCID-vefc-bfc3-fyg2 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-9310
|
| VCID-vgab-s8sr-53d9 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-2858
|
| VCID-vgar-q6tq-ufc5 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-7295
|
| VCID-vpp8-a7sw-pqef | QEMU: usb: hcd-ohci: out-of-bound access issue while processing transfer descriptors |
CVE-2020-25624
|
| VCID-vpu8-k8me-tfe6 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2022-26354
|
| VCID-vrwy-exwv-vyhr | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-20203
|
| VCID-vuj5-zduc-pkec | Qemu: usb: hcd-ehci: memory leak in ehci_process_itd |
CVE-2016-7995
|
| VCID-vvaj-skpn-u3ar | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3409
|
| VCID-vxeh-79zc-1qh6 | Multiple vulnerabilities have been found in QEMU, the worst of which allows context dependent attackers to cause Denial of Service. |
CVE-2014-5263
|
| VCID-vxg6-nx6s-6feu | security update |
CVE-2017-15289
|
| VCID-w1je-asqn-fbcr | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-9330
|
| VCID-w3nb-nbh8-m3fj | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9916
|
| VCID-w61j-bx6b-hudz | qemu: tsc210x: buffer overrun on invalid state load |
CVE-2013-4539
|
| VCID-w7gc-1eh2-3ufu | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3750
|
| VCID-wcwu-x7dt-83ee | QEMU: NVMe: NULL pointer dereference in nvme_directive_receive() |
CVE-2023-40360
|
| VCID-wdjx-9f36-abgu | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-15863
|
| VCID-wg5b-8smu-b3fm | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-10717
|
| VCID-whgj-3n1x-yyes | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-8668
|
| VCID-wj3c-7a67-ffd1 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8504
|
| VCID-wjxf-kgdw-2kau | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2020-16092
|
| VCID-wm9d-ymbb-sfdc | QEMU: usb: out-of-bounds r/w access issue |
CVE-2020-14364
XSA-335 |
| VCID-wmrd-dp72-dfep | qemu: qemu-ga win32 service unquoted search path |
CVE-2013-2231
|
| VCID-wpuv-6mdx-j7gm | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-8379
|
| VCID-wqwh-zgp4-ske3 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5857
|
| VCID-wyr6-c2nv-p3a2 | QEMU: ide: atapi: OOB access while processing read commands |
CVE-2020-29443
|
| VCID-x328-7st4-u3hx | qemu: ssd0323: fix buffer overun on invalid state load |
CVE-2013-4538
|
| VCID-x6ex-t3v5-87h9 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to the execution of arbitrary code on the host system. |
CVE-2017-5525
|
| VCID-x6sp-admm-2bb4 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8701
|
| VCID-x8ue-gf65-uket | QEMU: heap buffer overflow in sdhci_sdma_transfer_multi_blocks() in hw/sd/sdhci.c |
CVE-2020-17380
|
| VCID-xpbs-a4tm-6yec | qemu: virtio-scsi: buffer overrun on invalid state load |
CVE-2013-4542
|
| VCID-xrfx-cnup-sfbm | QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service |
CVE-2023-3255
|
| VCID-xxwr-uyhs-akfj | Qemu: vmware_vga: OOB stack memory access when processing svga command |
CVE-2016-7170
|
| VCID-xzmg-gkxx-buau | security update |
CVE-2018-17962
|
| VCID-y16a-n7u8-zfen | security update |
CVE-2017-9375
|
| VCID-yccx-a98b-nfh4 | security update |
CVE-2017-12809
|
| VCID-ycrs-vy13-wbff | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-3713
|
| VCID-ys2u-m7vv-33e6 | QEMU: Regression of CVE-2020-10756 fix in virt:rhel/qemu-kvm in Red Hat Enterprise Linux 8.3 |
CVE-2021-20295
|
| VCID-yt3z-g3w7-xfa5 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2021-4207
|
| VCID-ytyn-dbsc-k3cn | qemu: usb: insufficient sanity checking of setup_index+setup_len in post_load |
CVE-2013-4541
|
| VCID-yxet-nzmk-rkdf | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2015-8613
|
| VCID-yz2b-svsk-qyd5 | xen/qemu Cirrus LGD-54XX "bitblt" Heap Overflow |
CVE-2007-1320
|
| VCID-z19w-mr4e-9fh4 | Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. |
CVE-2022-4172
|
| VCID-z24v-fz53-zubg | QEMU: nvme: Out-of-bounds r/w buffer access in cmb operations |
CVE-2018-16847
|
| VCID-z31k-dhbq-k3ed | Qemu: stack buffer overflow in NBD server triggered via long export name |
CVE-2017-15118
|
| VCID-z4jn-dgcg-x7du | security update |
CVE-2018-11806
|
| VCID-z4u5-1yy5-ruhb | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-9105
|
| VCID-z61v-ubkc-dbdt | QEMU leak of uninitialized heap memory in rtl8139 device model |
CVE-2015-5165
|
| VCID-z6ke-rxnx-hfd9 | Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings |
CVE-2016-7155
|
| VCID-zawc-752b-9bh6 | Multiple vulnerabilities have been found in QEMU, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
CVE-2016-5338
|
| VCID-zdcz-c2h2-dfde | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2015-8745
|
| VCID-zf4c-x45c-tudm | Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). |
CVE-2022-0358
|
| VCID-zfwq-v3sh-kkbp | QEMU: scsi-generic: possible OOB access while handling inquiry request |
CVE-2019-6501
|
| VCID-zjyq-3nyd-k3g9 | security update |
CVE-2019-3812
|
| VCID-zk4y-2xjp-vfcs | Multiple vulnerabilities have been found in QEMU, the worst of which could result in the arbitrary execution of code. |
CVE-2020-13659
|
| VCID-zmns-hhw6-wkar | qemu (e1000 device driver): Buffer overflow when processing large packets |
CVE-2012-6075
|
| VCID-zpw2-zh1y-ebb3 | Multiple vulnerabilities have been found in QEMU, the worst of which may allow a remote attacker to cause a Denial of Service or gain elevated privileges from a guest VM. |
CVE-2017-8380
|
| VCID-zvub-u3fh-aua6 | Multiple vulnerabilities have been found in QEMU, worst of which allows local attackers to execute arbitrary code. |
CVE-2007-6227
|
| VCID-zyd2-vtc3-k7d3 | Multiple vulnerabilities have been found in QEMU, the worst of which could cause a Denial of Service condition. |
CVE-2016-10029
|