Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18
purl pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18
Next non-vulnerable version 1:10.0.2+ds-2+deb13u1~bpo12+1
Latest non-vulnerable version 1:10.2.2+ds-1
Risk 3.4
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-hkf8-96k7-kuc9
Aliases:
CVE-2025-14876
qemu-kvm: Unbounded allocation in virtio-crypto
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
VCID-m47q-17n6-t7gg
Aliases:
CVE-2026-2243
qemu-kvm: Heap buffer out-of-bounds read in VMDK compressed grain parsing
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
1:10.2.2+ds-1
Affected by 0 other vulnerabilities.
VCID-n71j-fz74-kyhf
Aliases:
CVE-2024-8354
qemu-kvm: usb: assertion failure in usb_ep_get()
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
1:10.2.2+ds-1
Affected by 0 other vulnerabilities.
VCID-t58m-9jqp-43c9
Aliases:
CVE-2024-7730
qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
VCID-uzxc-npak-yyc4
Aliases:
CVE-2021-20255
QEMU: net: eepro100: stack overflow via infinite recursion
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
VCID-vcun-y6d5-6uby
Aliases:
CVE-2026-3842
1:10.0.2+ds-2+deb13u1~bpo12+1
Affected by 0 other vulnerabilities.
1:10.2.2+ds-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (20)
Vulnerability Summary Aliases
VCID-3ew5-8dfe-u3d8 Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. CVE-2023-1544
VCID-3kyg-9mf3-kfft qemu-kvm: 'qemu-img info' leads to host file read/write CVE-2024-4467
VCID-6qnt-yaa3-p3bb Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2020-35506
VCID-91y7-ceje-jbd3 QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure CVE-2024-7409
VCID-cenj-mz55-jbg6 Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2021-3929
VCID-cnyg-wvxr-gqg3 QEMU: sdhci: heap buffer overflow in sdhci_write_dataport() CVE-2024-3447
VCID-d2ve-dnmj-4bbz qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234
VCID-ej5p-r4az-6ud2 Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. CVE-2022-4144
VCID-ewb7-nrtu-g7ex QEMU: virtio: DMA reentrancy issue leads to double free vulnerability CVE-2024-3446
VCID-f4sq-73vu-sfdq QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() CVE-2023-3019
VCID-gc6n-kgsc-f3b6 Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2020-35505
VCID-kx81-eex4-hug8 QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() CVE-2023-6693
VCID-mtj9-1cns-yybw QEMU: MMIO ops null pointer dereference may lead to DoS CVE-2020-15469
VCID-p2dz-mtns-5bb4 Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. CVE-2023-2861
VCID-ptty-88p4-ybe9 qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS CVE-2024-6505
VCID-pxjg-chmx-nkdc Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service. CVE-2022-35414
VCID-qh2s-apkz-sbaz Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2020-35504
VCID-qs61-1esc-c3cz QEMU: improper IDE controller reset can lead to MBR overwrite CVE-2023-5088
VCID-t5gq-4bhn-gkej Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2021-3611
VCID-w7gc-1eh2-3ufu Multiple vulnerabilities have been discovered in QEMU, the worst of which could result in remote code execution (guest sandbox escape). CVE-2021-3750

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:41:28.055849+00:00 Debian Importer Fixing VCID-cenj-mz55-jbg6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:16:42.225898+00:00 Debian Importer Affected by VCID-t58m-9jqp-43c9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:29:09.783714+00:00 Debian Importer Fixing VCID-qh2s-apkz-sbaz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:09:33.238689+00:00 Debian Importer Fixing VCID-3kyg-9mf3-kfft https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:01:50.356053+00:00 Debian Importer Fixing VCID-mtj9-1cns-yybw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:56:12.578202+00:00 Debian Importer Fixing VCID-ewb7-nrtu-g7ex https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:35:29.689337+00:00 Debian Importer Fixing VCID-ej5p-r4az-6ud2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:10:54.561490+00:00 Debian Importer Fixing VCID-t5gq-4bhn-gkej https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:08:16.644284+00:00 Debian Importer Affected by VCID-m47q-17n6-t7gg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:07:43.934974+00:00 Debian Importer Affected by VCID-n71j-fz74-kyhf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:05:42.127108+00:00 Debian Importer Affected by VCID-uzxc-npak-yyc4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:03:12.802375+00:00 Debian Importer Fixing VCID-ptty-88p4-ybe9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:48:31.318579+00:00 Debian Importer Fixing VCID-gc6n-kgsc-f3b6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:47:47.947362+00:00 Debian Importer Fixing VCID-w7gc-1eh2-3ufu https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:46:09.189296+00:00 Debian Importer Fixing VCID-6qnt-yaa3-p3bb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:34:01.451392+00:00 Debian Importer Fixing VCID-p2dz-mtns-5bb4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:14:08.116425+00:00 Debian Importer Fixing VCID-d2ve-dnmj-4bbz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:59:19.603111+00:00 Debian Importer Affected by VCID-vcun-y6d5-6uby https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:57:07.866531+00:00 Debian Importer Fixing VCID-pxjg-chmx-nkdc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:54:37.876549+00:00 Debian Importer Affected by VCID-hkf8-96k7-kuc9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T00:36:57.767169+00:00 Debian Oval Importer Fixing VCID-91y7-ceje-jbd3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:30:03.050826+00:00 Debian Oval Importer Fixing VCID-qs61-1esc-c3cz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:19:46.806438+00:00 Debian Oval Importer Fixing VCID-kx81-eex4-hug8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:42:27.732626+00:00 Debian Oval Importer Fixing VCID-f4sq-73vu-sfdq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:51:45.699301+00:00 Debian Oval Importer Fixing VCID-cnyg-wvxr-gqg3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:24:17.372960+00:00 Debian Oval Importer Fixing VCID-3ew5-8dfe-u3d8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T08:41:55.699095+00:00 Debian Importer Fixing VCID-cenj-mz55-jbg6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:23:48.065022+00:00 Debian Importer Affected by VCID-t58m-9jqp-43c9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:49:38.278545+00:00 Debian Importer Fixing VCID-qh2s-apkz-sbaz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:35:00.357443+00:00 Debian Importer Fixing VCID-3kyg-9mf3-kfft https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:29:18.153006+00:00 Debian Importer Fixing VCID-mtj9-1cns-yybw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:24:55.899013+00:00 Debian Importer Fixing VCID-ewb7-nrtu-g7ex https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:09:22.642415+00:00 Debian Importer Fixing VCID-ej5p-r4az-6ud2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:50:30.607295+00:00 Debian Importer Fixing VCID-t5gq-4bhn-gkej https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:48:32.629048+00:00 Debian Importer Affected by VCID-m47q-17n6-t7gg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:48:10.380004+00:00 Debian Importer Affected by VCID-n71j-fz74-kyhf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:46:35.886473+00:00 Debian Importer Affected by VCID-uzxc-npak-yyc4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:44:39.679929+00:00 Debian Importer Fixing VCID-ptty-88p4-ybe9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:33:12.853646+00:00 Debian Importer Fixing VCID-gc6n-kgsc-f3b6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:32:38.973962+00:00 Debian Importer Fixing VCID-w7gc-1eh2-3ufu https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:31:21.780482+00:00 Debian Importer Fixing VCID-6qnt-yaa3-p3bb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-12T00:09:59.813631+00:00 Debian Oval Importer Fixing VCID-91y7-ceje-jbd3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:07:07.096478+00:00 Debian Oval Importer Fixing VCID-qs61-1esc-c3cz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:22:29.358064+00:00 Debian Importer Fixing VCID-p2dz-mtns-5bb4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:37.606942+00:00 Debian Importer Fixing VCID-d2ve-dnmj-4bbz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:05:01.431935+00:00 Debian Oval Importer Fixing VCID-kx81-eex4-hug8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:01:41.741496+00:00 Debian Importer Affected by VCID-vcun-y6d5-6uby https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:00:28.041082+00:00 Debian Importer Fixing VCID-pxjg-chmx-nkdc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:58:47.472913+00:00 Debian Importer Affected by VCID-hkf8-96k7-kuc9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:28:32.469109+00:00 Debian Oval Importer Fixing VCID-f4sq-73vu-sfdq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:38:30.826596+00:00 Debian Oval Importer Fixing VCID-cnyg-wvxr-gqg3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:12:28.453659+00:00 Debian Oval Importer Fixing VCID-3ew5-8dfe-u3d8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T23:41:04.777599+00:00 Debian Oval Importer Fixing VCID-91y7-ceje-jbd3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:43:52.064283+00:00 Debian Oval Importer Fixing VCID-qs61-1esc-c3cz https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:47:33.646817+00:00 Debian Importer Fixing VCID-cenj-mz55-jbg6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T19:35:32.980893+00:00 Debian Importer Affected by VCID-t58m-9jqp-43c9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T19:12:22.215382+00:00 Debian Importer Fixing VCID-qh2s-apkz-sbaz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T19:02:30.438348+00:00 Debian Importer Fixing VCID-3kyg-9mf3-kfft https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:58:39.234070+00:00 Debian Importer Fixing VCID-mtj9-1cns-yybw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:55:41.814902+00:00 Debian Importer Fixing VCID-ewb7-nrtu-g7ex https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:45:12.002470+00:00 Debian Importer Fixing VCID-ej5p-r4az-6ud2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:33:03.702732+00:00 Debian Importer Fixing VCID-t5gq-4bhn-gkej https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:31:43.282929+00:00 Debian Importer Affected by VCID-m47q-17n6-t7gg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:31:27.609848+00:00 Debian Importer Affected by VCID-n71j-fz74-kyhf https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:30:22.451393+00:00 Debian Importer Affected by VCID-uzxc-npak-yyc4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:29:03.103820+00:00 Debian Importer Fixing VCID-ptty-88p4-ybe9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:21:19.062062+00:00 Debian Importer Fixing VCID-gc6n-kgsc-f3b6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:20:55.180508+00:00 Debian Importer Fixing VCID-w7gc-1eh2-3ufu https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T18:20:03.353427+00:00 Debian Importer Fixing VCID-6qnt-yaa3-p3bb https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T17:51:31.042589+00:00 Debian Oval Importer Fixing VCID-kx81-eex4-hug8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:16:31.587338+00:00 Debian Oval Importer Fixing VCID-f4sq-73vu-sfdq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:29:10.555287+00:00 Debian Oval Importer Fixing VCID-cnyg-wvxr-gqg3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:07:26.887993+00:00 Debian Oval Importer Fixing VCID-3ew5-8dfe-u3d8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-04T18:07:12.352898+00:00 Debian Importer Fixing VCID-p2dz-mtns-5bb4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:59:34.150491+00:00 Debian Importer Fixing VCID-pxjg-chmx-nkdc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:59:27.066357+00:00 Debian Importer Fixing VCID-d2ve-dnmj-4bbz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:53:36.708400+00:00 Debian Importer Affected by VCID-vcun-y6d5-6uby https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:51:56.095353+00:00 Debian Importer Affected by VCID-hkf8-96k7-kuc9 https://security-tracker.debian.org/tracker/data/json 38.1.0