493 matches found
Denial Of Service (DoS) Through Divide By Zero
QEMU is vulnerable to denial of serviceDoS through divide by zero attacks. This occurs in the serialupdateparameters function in hw/char/serial.c which allows local guest OS administrators to cause divide-by-zero error and QEMU process crash via vectors involving a value of divider greater than...
Authorization Bypass
spice-server is vulnerable to authorization bypass. The vulnerability allows local guest OS users to read from or write to arbitrary host memory locations...
Arbitrary Code Execution
QEMU is vulnerable to arbitray code execution. A local guest user is able to write arbitrary data outside of VRAM-allocated buffer boundaries in the host's application address space due to insufficient checks in the Cirrus blit region, leading to execution of arbitrary code...
Amazon Linux 2 : libvirt (ALAS-2018-1134)
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module.CVE-2018-6764 C Tenable Network Security, Inc. The descriptive...
Debian DLA-1599-1 : qemu security update
Several vulnerabilities were found in QEMU, a fast processor emulator : CVE-2016-2391 Zuozhi Fzz discovered that eoftimes in USB OHCI emulation support could be used to cause a denial of service, via a NULL pointer dereference. CVE-2016-2392 / CVE-2016-2538 Qinghao Tang found a NULL pointer...
DEBIAN-CVE-2018-15746
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service guest crash by leveraging mishandling of the seccomp policy for threads other than the main thread...
SUSE SLES11 Security Update : xen (SUSE-SU-2018:1203-1) (Meltdown)
This update for xen fixes several issues. These security issues were fixed : - CVE-2018-8897: Prevent mishandling of debug exceptions on x86 XSA-260, bsc1090820 - Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy HVM guests from causing a hypervisor crash or potentially...
[SECURITY] [DLA 1351-1] qemu security update
Package : qemu Version : 1.1.2+dfsg-6+deb7u25 CVE ID : CVE-2018-7550 Debian Bug : 892041 The loadmultiboot function in hw/i386/multiboot.c in Quick Emulator aka QEMU allows local guest OS users to execute arbitrary code on the QEMU host via a mhloadendaddr value greater than mhbssendaddr, which...
CVE-2018-7858
Quick Emulator aka QEMU, when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service out-of-bounds access and QEMU process crash by leveraging incorrect region calculation when updating VGA display...
CVE-2018-7550
The loadmultiboot function in hw/i386/multiboot.c in Quick Emulator aka QEMU allows local guest OS users to execute arbitrary code on the QEMU host via a mhloadendaddr value greater than mhbssendaddr, which triggers an out-of-bounds read or write memory access...
CVE-2018-7550
The loadmultiboot function in hw/i386/multiboot.c in Quick Emulator aka QEMU allows local guest OS users to execute arbitrary code on the QEMU host via a mhloadendaddr value greater than mhbssendaddr, which triggers an out-of-bounds read or write memory access...
CVE-2018-6764
util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...
The vulnerability of the Core component of the Oracle VM VirtualBox allows a malicious attacker from the guest operating system to execute certain commands or copy data from the host operating system.
The vulnerability of the Core hypervisor component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability allows a malicious individual operating locally on the guest operating system to execute certain commands or copy data from the guest operating syste...
CVE-2017-17381
The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service divide-by-zero error and QEMU process crash by unsetting vring alignment while updating Virtio rings...
The vulnerability of Xen hypervisors relates to deficiencies in access control, allowing attackers to trigger service failures or increase their privileges.
The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally within a user account of the x86 guest operating system in hardware virtualization mode, to trigger a hypervisor failure or increase their...
The vulnerability of the load_multiboot function (hw/i386/multiboot.c) in the QEMU hardware emulation driver allows a hacker to execute arbitrary code.
The vulnerability of the loadmultiboot function hw/i386/multiboot.c in the QEMU hardware emulation driver is caused by a numerical overflow. Exploiting this vulnerability allows a attacker operating on the local guest operating system to execute arbitrary code on the host operating system using a...
CVE-2017-15038
Race condition in the v9fsxattrwalk function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes...
UBUNTU-CVE-2017-12135
Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...