QE
Product
QEMU
419
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 83Medium 221Low 26
Watch
Add QEMU to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5526 | 6.5 | Mar 15 | Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash)… Affected: through 2.8.1.1 |
| CVE-2017-5525 | 6.5 | Mar 15 | Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash)… Affected: through 2.8.1.1 |
| CVE-2017-6505 | 6.5 | Mar 15 | The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via… Affected: through 2.8.1.1 |
| CVE-2016-9916 | 6.5 | Dec 29 | Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU… Affected: before 2.8.0; 2.8.0; 2.8.0 |
| CVE-2016-9915 | 6.5 | Dec 29 | Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU… Affected: through 2.7.1; 2.8.0; 2.8.0 |
| CVE-2016-9914 | 6.5 | Dec 29 | Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process… Affected: through 2.7.1; 2.8.0; 2.8.0 |
| CVE-2016-9913 | 6.5 | Dec 29 | Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host… Affected: through 2.7.1; 2.8.0; 2.8.0 |
| CVE-2016-9846 | 6.5 | Dec 29 | QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue Affected: through 2.7.1; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2016-9845 | 6.5 | Dec 29 | QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue Affected: before 2.8.0; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2015-8701 | 6.5 | Dec 29 | QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error Affected: through 2.5.1.1 |
| CVE-2016-9921 | 6.5 | Dec 23 | Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue Affected: through 2.7.1; 2.8.0; 2.8.0; 2.8.0 |
| CVE-2016-9912 | 6.5 | Dec 23 | Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue Affected: through 2.8.1.1 |
| CVE-2016-9911 | 6.5 | Dec 23 | Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue Affected: through 2.7.1 |
| CVE-2016-9907 | 6.5 | Dec 23 | Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw Affected: through 2.7.1 |
| CVE-2016-2392 | 6.5 | Jun 16 | The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows… Affected: 2.5.0 |
| CVE-2016-4020 | 6.5 | May 25 | The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information… Affected: through 2.6.2 |
| CVE-2016-2858 | 6.5 | Apr 7 | QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request,… Affected: through 2.5.1.1 |
| CVE-2023-1544 | 6.3 | Mar 23 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device Affected: through 7.2.0 |
| CVE-2020-17380 | 6.3 | Jan 30 | A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support Affected: through 5.0.0 |
| CVE-2014-0147 | 6.2 | Feb 11 | Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… Affected: before 1.6.2 |
| CVE-2021-3507 | 6.1 | May 6 | A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including) Affected: through 6.0.0 |
| CVE-2024-3447 | 6.0 | Nov 14 | Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() Affected: before 7.2.11; 8.0.0 before 8.2.3; 9.0.0; 9.0.0; 9.0.0; 9.0.0 |
| CVE-2024-26328 | 6.0 | Feb 19 | An issue was discovered in QEMU 7.1.0 through 8.2.1 Affected: 7.1.0 through 8.2.1 |
| CVE-2023-0330 | 6.0 | Mar 6 | A vulnerability in the lsi53c895a device affects the latest version of qemu Affected: 7.2.0 before 7.2.3; 8.0.0; 8.0.0; 8.0.0; 8.0.0; 8.0.0; +1 more |
| CVE-2021-4158 | 6.0 | Aug 24 | A NULL pointer dereference issue was found in the ACPI code of QEMU Affected: 6.0.0 before 7.0.0 |
| CVE-2021-3608 | 6.0 | Feb 24 | A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 Affected: before 6.1.0 |
| CVE-2021-3607 | 6.0 | Feb 24 | An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0 Affected: before 6.1.0 |
| CVE-2020-35503 | 6.0 | Jun 2 | A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0 Affected: through 6.0.0 |
| CVE-2020-35504 | 6.0 | May 28 | A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0 Affected: before 6.0.0 |
| CVE-2021-20221 | 6.0 | May 13 | An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform Affected: through 4.2.0 |
| CVE-2021-3416 | 6.0 | Mar 18 | A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0 Affected: through 5.2.0 |
| CVE-2020-27821 | 6.0 | Dec 8 | A flaw was found in the memory management API of QEMU during the initialization of a memory region cache Affected: before 5.2.0 |
| CVE-2020-13800 | 6.0 | Jun 4 | ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call Affected: 4.2.0 |
| CVE-2020-1711 | 6.0 | Feb 11 | An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while… Affected: 2.12.0 before 4.2.1 |
| CVE-2018-5683 | 6.0 | Jan 23 | The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory… Affected: through 2.11.1 |
| CVE-2015-7549 | 6.0 | Oct 30 | The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process… Affected: before 2.5.0 |
| CVE-2017-15289 | 6.0 | Oct 16 | The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process… Affected: through 2.10.2 |
| CVE-2017-7377 | 6.0 | Apr 10 | The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor… Affected: through 2.8.1; 2.9.0; 2.9.0 |
| CVE-2016-10155 | 6.0 | Mar 15 | Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU… Affected: through 2.8.1.1 |
| CVE-2016-7995 | 6.0 | Dec 10 | Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory… Affected: through 2.7.1 |
| CVE-2016-7994 | 6.0 | Dec 10 | Memory leak in the virtio_gpu_resource_create_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service… Affected: through 2.7.1 |
| CVE-2016-7466 | 6.0 | Dec 10 | Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS administrators to cause a denial of… Affected: through 2.7.1 |
| CVE-2016-7422 | 6.0 | Dec 10 | The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and… Affected: through 2.7.1 |
| CVE-2016-7116 | 6.0 | Dec 10 | Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a Affected: through 2.6.2; 2.7.0; 2.7.0; 2.7.0; 2.7.0; 2.7.0 |
| CVE-2016-6836 | 6.0 | Dec 10 | The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by… Affected: through 2.7.1 |
| CVE-2016-6835 | 6.0 | Dec 10 | The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer… Affected: before 2.6.0 |
| CVE-2016-4964 | 6.0 | Dec 10 | The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU… Affected: through 2.6.2 |
| CVE-2016-9106 | 6.0 | Dec 9 | Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) by… Affected: through 2.7.1 |
| CVE-2016-9105 | 6.0 | Dec 9 | Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via… Affected: through 2.7.1 |
| CVE-2016-9103 | 6.0 | Dec 9 | The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host heap memory information by reading… Affected: through 2.7.1 |