Qemu

Qemu

428 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2016-9602

  • EPSS 3.8%
  • Veröffentlicht 26.04.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 03:01:29

Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a ho...

5.5

CVE-2018-7858

  • EPSS 0.61%
  • Veröffentlicht 12.03.2018 21:29:01
  • Zuletzt bearbeitet 21.11.2024 04:12:53

Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when up...

8.8

CVE-2018-7550

  • EPSS 0.61%
  • Veröffentlicht 01.03.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 04:12:20

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or ...

5.5

CVE-2017-18043

  • EPSS 0.44%
  • Veröffentlicht 31.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:14

Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash).

4.4

CVE-2017-18030

  • EPSS 0.4%
  • Veröffentlicht 23.01.2018 18:29:00
  • Zuletzt bearbeitet 21.11.2024 03:19:12

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

6

CVE-2018-5683

Exploit
  • EPSS 0.68%
  • Veröffentlicht 23.01.2018 18:29:00
  • Zuletzt bearbeitet 21.11.2024 04:09:09

The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.

5.5

CVE-2014-3471

  • EPSS 0.4%
  • Veröffentlicht 12.01.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 02:08:10

Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.

7.8

CVE-2017-15124

  • EPSS 2.84%
  • Veröffentlicht 09.01.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:14:07

VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VN...

6.5

CVE-2017-17381

  • EPSS 0.41%
  • Veröffentlicht 07.12.2017 02:29:13
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.

10

CVE-2017-16845

  • EPSS 3.03%
  • Veröffentlicht 17.11.2017 20:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.