Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD07BB3BD2-A920-11DD-8503-0211060005DF
HistoryNov 01, 2008 - 12:00 a.m.

qemu -- Heap overflow in Cirrus emulation

2008-11-0100:00:00
vuxml.freebsd.org
14

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

JSON

Aurelien Jarno reports:

CVE-2008-4539: fix a heap overflow in Cirrus emulation
The code in hw/cirrus_vga.c has changed a lot between
CVE-2007-1320 has been announced and the patch has been applied.
As a consequence it has wrongly applied and QEMU is still
vulnerable to this bug if using VNC.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqemu< 0.9.1_10UNKNOWN
FreeBSDanynoarchqemu-devel< 0.9.1_10UNKNOWN

Related

prion 3
fedora 8
openvas 41
debiancve 3
nessus 27
cve 3
ubuntucve 3
veracode 1
securityvulns 1
debian 3
osv 3
redhat 1
centos 1
oraclelinux 1
freebsd 1
ubuntu 2
f5 2
prion
prion
Heap overflow
2008-12-29 15:24:00
Heap overflow
2007-05-02 17:19:00
Heap overflow
2014-12-08 16:59:00
fedora
fedora
[SECURITY] Fedora 10 Update: kvm-74-6.fc10
2008-11-22 16:51:25
[SECURITY] Fedora 8 Update: kvm-60-7.fc8
2008-11-12 02:55:21
[SECURITY] Fedora 9 Update: kvm-65-15.fc9
2008-12-24 18:40:58
openvas
openvas
Fedora Update for kvm FEDORA-2008-9556
2009-02-17 00:00:00
Fedora Update for kvm FEDORA-2008-9556
2009-02-17 00:00:00
Fedora Update for kvm FEDORA-2008-10000
2009-02-16 00:00:00
debiancve
debiancve
CVE-2008-4539
2008-12-29 15:24:00
CVE-2007-1320
2007-05-02 17:19:00
CVE-2014-8106
2014-12-08 16:59:00
nessus
nessus
Fedora 10 : kvm-74-6.fc10 (2008-10083)
2012-09-24 00:00:00
FreeBSD : qemu -- Heap overflow in Cirrus emulation (07bb3bd2-a920-11dd-8503-0211060005df)
2008-11-03 00:00:00
Fedora 9 : kvm-65-15.fc9 (2008-11705)
2008-12-26 00:00:00
cve
cve
CVE-2008-4539
2008-12-29 15:24:00
CVE-2007-1320
2007-05-02 17:19:00
CVE-2014-8106
2014-12-08 16:59:00
ubuntucve
ubuntucve
CVE-2008-4539
2008-12-29 00:00:00
CVE-2007-1320
2007-05-02 00:00:00
CVE-2014-8106
2014-12-08 00:00:00
veracode
veracode
Buffer Overflows
2020-04-10 00:15:34
securityvulns
securityvulns
[SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities
2007-10-06 00:00:00
debian
debian
[SECURITY] [DSA 1384-1] New xen-utils packages fix several vulnerabilities
2007-10-05 19:33:14
[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities
2009-05-11 21:13:09
[SECURITY] [DSA 1284-1] New qemu packages fix several vulnerabilities
2007-05-01 10:03:13
osv
osv
xen-3.0
2007-10-05 00:00:00
qemu - several vulnerabilities
2009-05-11 00:00:00
qemu
2007-05-01 00:00:00
redhat
redhat
(RHSA-2007:0323) Important: xen security update
2007-10-02 00:00:00
centos
centos
xen security update
2007-10-03 06:01:12
oraclelinux
oraclelinux
Important: xen security update
2007-10-02 00:00:00
freebsd
freebsd
qemu -- several vulnerabilities
2007-05-01 00:00:00
ubuntu
ubuntu
KVM vulnerabilities
2009-05-12 00:00:00
KVM regression
2009-05-13 00:00:00
f5
f5
K63519101 : Multiple QEMU vulnerabilities
2016-02-16 00:00:00
SOL63519101 - Multiple QEMU vulnerabilities
2016-02-16 00:00:00

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

JSON
Related for 07BB3BD2-A920-11DD-8503-0211060005DF
prion3fedora8openvas41debiancve3nessus27cve3ubuntucve3veracode1securityvulns1debian3osv3redhat1centos1oraclelinux1freebsd1ubuntu2f52