ALPINE-CVE-2016-9380

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...

DEBIAN-CVE-2016-9386

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values...

CVE-2016-9386

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values...

UBUNTU-CVE-2016-9380

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...

Format string

The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...

UBUNTU-CVE-2016-9386

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values...

CVE-2016-9380

CVE-2016-9380 affects the Xen pygrub boot loader emulator. When nul-delimited output is requested, a local pygrub-using guest OS administrator can read or delete arbitrary files on the host by manipulating the bootloader configuration with NUL bytes. The vulnerability arises from how pygrub outpu...

CVE-2016-9386

The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving "unexpected" base/limit values...

CVE-2016-9386

CVE-2016-9386 affects the Xen x86 emulator: it does not properly treat x86 NULL segments as unusable during memory accesses, potentially allowing local HVM guests to escalate privileges via vectors involving unexpected base/limit values. Public advisories in connected docs confirm Xen patches exi...

QEMU elevation of privilege vulnerability (CNVD-2017-00955)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A boost vulnerability exists in QEMU. An attacker can exploit this vulnerability to obtain elevated privileges...

CentOS Update for qemu-img CESA-2017:0083 centos7

Check the version of qemu-img SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882637";...

Cemu 1.6.4b - Information Leak + Buffer Overflow (Emulator Breakout) Vulnerability

Exploit for multiple platform in category local exploits For those who only care about one thing: the PoC is here. Mirror: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New versio...

Cemu 1.6.4b - Information Leak Buffer Overflow (Emulator Breakout)

Cemu 1.6.4b - Information Leak Buffer Overflow Emulator Breakout For those who only care about one thing: the PoC is here. Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New...

Cemu 1.6.4b - Information Leak / Buffer Overflow (Emulator Breakout)

For those who only care about one thing: the PoC is here. Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41021.zip Overview Cemu is a closed-source Wii U emulator developed by Exzap. New versions are released to those who donate to him via his Patreon...

Security update for xen (important)

This updates xen to version 4.5.5 to fix the following issues: - An unprivileged user in a guest could gain guest could escalate privilege to that of the guest kernel, if it had could invoke the instruction emulator. Only 64-bit x86 HVM guest were affected. Linux guest have not been vulnerable...

CVE-2016-9603

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this fla...

UBUNTU-CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2015-8744

QEMU aka Quick Emulator built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged CAPSYSRAWIO guest user could use this flaw to crash the QEMU process instance resulting in DoS...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...