DEBIAN-CVE-2019-12247

QEMU 3.0.0 has an Integer Overflow because the qga/commands.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable...

Xen Hypervisor Code Execution

The vulnerability of the QEMU hypervisor component in Xen is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing fields such as TXSTATUSSTARTPACKET and TXSTATUSDEVIC...