The vulnerability of the savevm function in the QEMU hardware emulation software involves unsafe management of privileges, allowing a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the savevm function in the QEMU hardware emulation software relates to the ability to modify data stored in savevm. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a security vulnerability that originates from a vulnerability that can be exploited by an attacker to affect array lengths an...

Vulnerability fixed in QEMU

A vulnerability has been fixed in QEMU. The vulnerability allows potentially allow a local malicious person from a guest system to execute arbitrary code on the host system under root permissions. Exploiting the vulnerability is no easy task. -= Red Hat =- Red Hat has made updates available for R...

QEMU Code Issue Vulnerability

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a code issue vulnerability that stems from a block: fdc: null pointer dereference causing a client crash...

PT-2020-6485

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileg...

UBUNTU-CVE-2020-25741

fdctrlwritedata in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive...

Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values which trigger an out-of-bounds write.

...

QEMU Buffer Overflow Vulnerability (CNVD-2020-44638)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/net/xgmac.c file in the XGMAC Ethernet controller in versions prior to QEMU...

UBUNTU-CVE-2020-13800

ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mmindex value during an atimmread or atimmwrite call...

QEMU Code Issue Vulnerability

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A code issue vulnerability exists in the addressspacemap of the exec.c file in QEMU version 4.2.0. A local attacker can explo...

UBUNTU-CVE-2020-13253

sdwpaddr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhciwrite operations. A guest OS user can crash the QEMU process...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

The vulnerability of the pnv_lpc_do_eccb function in the hardware/ppc/pnv_lpc.c file of the QEMU hardware emulation software allows a hacker to induce a system failure and gain unauthorized access to the PowerNV memory.

The vulnerability of the pnvlpcdoeccb function in the hardware/ppc/pnvlpc.c file of the QEMU hardware emulator is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure and gain unauthorized access to the PowerNV memory...

QEMU: slirp: heap buffer overflow during packet reassembly

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the ipreass routine while reassembling incoming packets if the first fragment is bigger than the m-mdat buffer. An attacker could use this flaw to crash the QEMU process on the...

DEBIAN-CVE-2019-6501

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

DEBIAN-CVE-2018-18954

The pnvlpcdoeccb function in hw/ppc/pnvlpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory...

UBUNTU-CVE-2018-18954

The pnvlpcdoeccb function in hw/ppc/pnvlpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory...

DEBIAN-CVE-2017-2620

Quick emulator QEMU before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrusbitbltcputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially...