QE
Product
QEMU
419
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 83Medium 221Low 26
Watch
Add QEMU to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3735 | 4.4 | Aug 26 | A deadlock issue was found in the AHCI controller device of QEMU Affected: 6.1.0 |
| CVE-2020-35505 | 4.4 | May 28 | A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 Affected: before 6.0.0; 6.0.0; 6.0.0 |
| CVE-2017-18030 | 4.4 | Jan 23 | The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU… Affected: through 2.8.1.1 |
| CVE-2017-11334 | 4.4 | Aug 2 | The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and… Affected: through 2.9.1 |
| CVE-2016-7421 | 4.4 | Dec 10 | The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and… Affected: through 2.7.1 |
| CVE-2016-7170 | 4.4 | Dec 10 | The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and… Affected: through 2.7.1 |
| CVE-2016-7157 | 4.4 | Dec 10 | The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a… Affected: through 2.7.1 |
| CVE-2016-7156 | 4.4 | Dec 10 | The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU… Affected: through 2.7.1 |
| CVE-2016-7155 | 4.4 | Dec 10 | hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash)… Affected: through 2.7.1 |
| CVE-2016-6888 | 4.4 | Dec 10 | Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU… Affected: through 2.6.2; 2.7.0; 2.7.0; 2.7.0; 2.7.0 |
| CVE-2016-6834 | 4.4 | Dec 10 | The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop… Affected: through 2.6.2; 2.7.0; 2.7.0; 2.7.0 |
| CVE-2016-6833 | 4.4 | Dec 10 | Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of… Affected: through 2.6.2; 2.7.0; 2.7.0; 2.7.0 |
| CVE-2016-6490 | 4.4 | Dec 10 | The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU… Affected: through 2.6.2; 2.7.0 |
| CVE-2016-9104 | 4.4 | Dec 9 | Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause… Affected: through 2.7.1 |
| CVE-2016-7423 | 4.4 | Oct 10 | The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a… Affected: through 2.7.1 |
| CVE-2016-7909 | 4.4 | Oct 5 | The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process… Affected: through 2.7.1 |
| CVE-2016-7908 | 4.4 | Oct 5 | The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest… Affected: through 2.7.1 |
| CVE-2016-7907 | 4.4 | Oct 5 | The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest… Affected: through 2.8.1.1; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; +1 more |
| CVE-2016-5105 | 4.4 | Sep 2 | The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which… Affected: through 2.6.2 |
| CVE-2016-5238 | 4.4 | Jun 14 | The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors… Affected: through 2.6.2 |
| CVE-2016-4453 | 4.4 | Jun 1 | The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA… Affected: through 2.6.0 |