UBUNTU-CVE-2019-3840

A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service...

QEMU hardware emulation VGA Draw Text DoS

The vulnerability of the vgaDrawText function in the QEMU hardware emulation software is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a system failure...

Debian DLA-1646-1 : qemu security update

Several vulnerabilities were found in QEMU, a fast processor emulator : CVE-2018-17958 The rtl8139 emulator is affected by an integer overflow and subsequent buffer overflow. This vulnerability might be triggered by remote attackers with crafted packets to perform denial of service via OOB stack...

CVE-2019-6778

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. It occurs in tcpemu routine while emulating the Identification protocol and copying message data to a socket buffer. A user or process could use this flaw to crash the QEMU process on the host...

New Android Malware Apps Use Motion Sensor to Evade Detection

Even after so many efforts by Google for preventing its Play Store from malware, shady apps somehow managed to fool its anti-malware protections and get into its service to infect Android users with malware. Two such Android apps have recently been spotted on the Google Play Store by security...

Denial Of Service (DoS)

qemu-kvm-rhev is vulnerable to denial of service DoS attacks. The vulnerability exists as the addressspacewritecontinue function in exec.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds access and guest instance crash by leveraging use...

Denial Of Service (DoS)

QEMU is vulnearble to denial of service. An integer overflow flaw and an out-of-bounds read flaw were found in the way QEMU's VGA emulator set certain VGA registers while in VBE mode. A privileged guest user could use this flaw to crash the QEMU process instance...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:0003-1)

This update for xen fixes the following issues : Update to Xen 4.11.1 bug fix release bsc1027519 CVE-2018-17963: Fixed an integer overflow issue in the QEMU emulator, which could occur when a packet with large packet size is processed. A user inside a guest could have used this flaw to crash the...

SUSE-SU-2019:0003-1 Security update for xen

This update for xen fixes the following issues: - Update to Xen 4.11.1 bug fix release bsc1027519 - CVE-2018-17963: Fixed an integer overflow issue in the QEMU emulator, which could occur when a packet with large packet size is processed. A user inside a guest could have used this flaw to crash t...

[SECURITY] Fedora 29 Update: terminology-1.3.2-1.fc29

Fast and lightweight terminal emulator using EFL libraries...

[SECURITY] Fedora 28 Update: terminology-1.3.2-1.fc28

Fast and lightweight terminal emulator using EFL libraries...

[SECURITY] Fedora 29 Update: adplug-2.2.1-7.fc29

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++ and released under the LGPL. AdPlug plays sound data, originally created for the AdLib OPL2 audio board, directly from its original format on top of an OPL2 emulator or by using the...

[SECURITY] Fedora 28 Update: adplug-2.2.1-7.fc28

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++ and released under the LGPL. AdPlug plays sound data, originally created for the AdLib OPL2 audio board, directly from its original format on top of an OPL2 emulator or by using the...

DEBIAN-CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

QEMU Null Pointer Backward Reference Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A null pointer reverse-reference vulnerability exists in QEMU, which stems from the program's failure to specify a routine to handle the...

PT-2019-12715 · Qemu +2 · Qemu +2

Name of the Vulnerable Software and Affected Versions: QEMU version 3.0.0 Description: The issue is related to an Integer Overflow in QEMU 3.0.0, caused by the qga/commands.c files not checking the length of the argument list or the number of environment variables. However, it has been disputed a...

QEMU 'pvrdma_realize' function denial of service vulnerability

QEMU aka Quick Emulator is a suite of simulation processor software. The software is fast and cross-platform. A security vulnerability exists in the 'pvrdmarealize' function in the hw/rdma/vmw/pvrdmamain.c file in QEMU. An attacker can exploit this vulnerability to cause a denial of service memor...

QEMU Directory Traversal Vulnerability

QEMU is a suite of analog processor software developed by French programmer Fabrice Bellard.Media Transfer Protocol MTP is one of the... There is a security vulnerability in MTP in QEMU. An attacker could use this vulnerability to navigate the host filesystem in the context of a QEMU process and...

PT-2018-3505

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to the create cq and create qp functions in the PVRDMA emulator of QEMU, which is associated with insufficient resource release after its valid lifetime has expired. This...

PT-2018-3502

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to a memory leak in the pvrdma realize function in QEMU's PVRDMA hardware emulator. This leak occurs after an initialization error. The problem is associated with...