QEMU DoS

The vulnerability of the QEMU hardware emulation software is related to insufficient testing of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

QEMU virtqueue_push() Disclosure

The vulnerability of the virtio-scsi, virtio-blk, and virtio-crypt components of the QEMU hardware emulation driver’s virtqueuepush function is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information through the...

Linux Distros Unpatched Vulnerability : CVE-2022-36648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu an...

virtio-net QEMU DoS

The vulnerability of the virtio-net emulator’s hardware emulation interface of QEMU is related to the asynchronous nature of the shutdown process, which allows for scenarios of “racing.” Exploiting this vulnerability can enable a perpetrator to cause a service failure...

QEMU SCSI Function Input Output Request DoS

The vulnerability of the input/output requests for the mptsasfreerequest function in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...

QEMU Pointer Swapping DoS

The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

QEMU Hardware Emulation Use-After-Free DoS

The vulnerability of the QEMU hardware emulation software is related to access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to cause a system failure...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the lsidomsgout function hw/scsi/lsi53c895a.c in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

QEMU Pointer Swapping DoS

The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

QEMU Hardware Emulation Encryption

The vulnerability of the QEMU hardware emulation software is related to a implementation error in the handling of pointer authentication. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

QEMU e1000e Memory Use After Free DoS

The vulnerability of the e1000e wireless bridge in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a system failure...

QEMU Block Buffer Overflow DoS

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

QEMU Hardware Emulation DoS

The vulnerability of the QEMU hardware emulation software is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PVRDMA virtual network adapter driver DoS

The vulnerability in the hw/rdma/vmw/pvrdmacmd.c component of the PVRDMA virtual network adapter’s hardware emulation software, QEMU, is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure by creating CQ/QP objects...

tcp_emu Slirp QEMU DoS

The vulnerability of the tcpemu function slirp/tcpsubr.c of the Slirp TCP/IP emulator and the QEMU hardware emulation software is related to the execution of operations outside the data buffer “scrcv-sbdata”. Exploiting this vulnerability can allow an attacker to cause a service failure...

QEMU Unexpected Termination

The vulnerability of the Virtio GPU emulation software in QEMU is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to cause the application to terminate abnormally due to a file rename and execution...