Browse CVEs

HIGH 8.2 CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. Qemu Mitigation only Fix from $1,9502024-10-21 MEDIUM 6.5 CVE-2019-20808 In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the ati_cursor_define() routine while handling MMIO w… Qemu Mitigation only Fix from $1,6002020-12-31 MEDIUM 5.6 CVE-2020-11102 hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data l… Qemu Mitigation only Fix from $1,6002020-04-06 CRITICAL 9.8 CVE-2018-20815 In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk. Qemu Mitigation only Fix from $2,3002019-05-31 MEDIUM 6.8 CVE-2014-3461 hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, re… Qemu Mitigation only Fix from $1,6002014-11-04 MEDIUM 6.9 CVE-2013-2007 The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows lo… Qemu Mitigation only Fix from $1,6002013-05-21 HIGH 7.4 CVE-2011-1751 The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unp… Qemu Mitigation only Fix from $1,9502012-06-21 HIGH 7.4 CVE-2011-1750 Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of servi… Qemu Mitigation only Fix from $1,9502012-06-21 HIGH 7.8 CVE-2008-5714 Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters… Qemu Mitigation only Fix from $1,9502008-12-24 HIGH 7.2 CVE-2008-4553 qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and… Qemu No fix yet Fix from $1,9502008-10-15 HIGH 7.2 CVE-2007-6227 QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_buffer) buffer, and probably hav… Qemu Mitigation only Fix from $1,9502007-12-04