Denial Of Service (DoS)

qemu is vulnerable to Denial Of Service DoS. This occurs when a previous connection in the handshake phase fails, resulting in qemu cleaning up the connection again leading to DoS...

Out-of-bounds Write

qemu is vulnerable to Out-of-bounds Write. This vulnerability occurs since there is no check for the value of 'srclen' and 'dstlen' in 'virtiocryptosymophelper' resulting in a heap-based buffer overflow...

Denial Of Service (DoS)

qemu is vulnerable to Denial of Service DoS. A wrong exit condition within qemu may lead to an infinite loop in the 'inflatebuffer' function resulting in a denial of service...

QEMU < 7.2.4 / < 8.0.3 Multiple Vulnerabilites

The version of QEMU installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on...

QEMU < 8.1.0-rc2 DOS

The version of QEMU installed on the remote Windows host is affected by a race condition due to the async nature of hot-unplug. hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time...

SUSE SLED15: qemu / qemu-SLOF / qemu-accel-qtest / qemu-accel-tcg-x86 / qemu-arm / etc (SUSE-SU-2023:3234-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3234-1 advisory. - CVE-2023-2861: Fixed improper access control on special files in 9pfs bsc1212968. -...

SUSE-SU-2023:3234-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-2861: Fixed improper access control on special files in 9pfs bsc1212968. - CVE-2023-3301: Fixed NULL pointer dereference in vhostvdpagetvhostnet bsc1213414. - CVE-2023-3255: Fixed infinite loop in inflatebuffer leads to denial of service...

Medium: qemu

Issue Overview: There is a vulnerability in the lsi53c895a device which affects the latest version of qemu. The carefully designed PoC can repeatedly trigger DMA writes but does not limit the addresses written to the DMA, resulting in reentrancy issues and eventually overflow. CVE-2023-0330...

QEMU Buffer Overflow Vulnerability (CNVD-2024-14774)

QEMU is a suite of simulation processor software. The software is fast and cross-platform. Qemu suffers from a buffer overflow vulnerability that stems from the fact that the values of srclen and dstlen are not checked in virtiocryptosymophelper, and a heap buffer overflow may occur when processi...

OESA-2023-1475 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to...

OESA-2023-1473 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to...

Denial Of Service (DoS)

qemu is vulnerable to Denial of Service DoS attacks. The flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and an application crash...

PT-2023-9605

Name of the Vulnerable Software and Affected Versions QEMU versions 8.0.4 and earlier Description The issue is related to the nvme directive receive function in the QEMU NVMe emulator, which accesses a NULL pointer because there is no check for whether an endurance group is configured before...

Denial Of Service (DoS)

qemu is vulnerable to Denial of Service DoS attacks. Because hot-unplug is async, a race condition can occur in which the net device backend is cleared before the virtio-net pci frontend is removed. This time window might be used by a malicious attacker to trigger an assertion and cause a denial ...

SUSE CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...

CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...

Heap overflow

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...

CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...

CVE-2023-4135

Technical details about CVE-2023-4135 are not provided in the supplied connected documents. The materials reference the CVE but do not specify affected products, versions, root cause, impact, or fixes. Monitor for updates.

CVE-2023-4135

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can ...