QE
Product
Qemu
419
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 83Medium 221Low 26
Watch
Add Qemu to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-2212 | – | Jun 21 | Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted… Affected: through 0.14.0; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +34 more |
| CVE-2011-1751 | – | Jun 21 | The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge,… Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +34 more |
| CVE-2011-1750 | – | Jun 21 | Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly… Affected: 0.14.0 |
| CVE-2011-0011 | – | Jun 21 | qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions Affected: through 0.11.0; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +11 more |
| CVE-2010-0297 | – | Feb 12 | Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial… Affected: through 0.11.0; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +34 more |
| CVE-2008-4539 | – | Dec 29 | Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by… Affected: before 0.10.0 |
| CVE-2008-5714 | – | Dec 24 | Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended Affected: 0.9.1 |
| CVE-2008-2382 | – | Dec 24 | The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service… Affected: through 0.9.1; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +23 more |
| CVE-2008-4553 | – | Oct 15 | qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories Affected: 0.9.1-5 |
| CVE-2008-1945 | – | Aug 8 | QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the… Affected: 0.9.0 |
| CVE-2008-2004 | – | May 12 | The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by… Affected: 0.9.1 |
| CVE-2008-0928 | – | Mar 3 | Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and… Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +23 more |
| CVE-2007-6227 | – | Dec 4 | QEMU 0.9.0 allows local users of a Windows XP SP2 guest operating system to overwrite the TranslationBlock (code_gen_buffer) buffer, and probably have unspecified other impacts… Affected: 0.9.0 |
| CVE-2007-5729 | – | Oct 30 | The NE2000 emulator in QEMU 0.8.2 allows local users to execute arbitrary code by writing Ethernet frames with a size larger than the MTU to the EN0_TCNT register, which triggers… Affected: 0.8.2 |
| CVE-2007-1321 | – | Oct 30 | Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain… Affected: 0.8.2 |
| CVE-2007-5730 | – | Oct 30 | Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen"… Affected: 0.8.2 |
| CVE-2007-1366 | – | May 2 | QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error Affected: 0.8.2 |
| CVE-2007-1322 | – | May 2 | QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction Affected: 0.8.2 |
| CVE-2007-1320 | – | May 2 | Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow… Affected: 0.8.2 |