CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

CVE-2017-5957 is a stack-based buffer overflow in the function vrend_decode_set_framebuffer_state() within virglrenderer (vrend_decode.c), used by Quick Emulator (QEMU). The overflow is triggered via the nr_cbufs argument, allowing a local guest user to crash the application (DoS). The descriptio...

Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo

Quick emulator QEMU built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrusbitbltcputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute...

CVE-2016-10028

CVE-2016-10028 affects QEMU with Virtio GPU Device emulator support. The flaw is in virgl_cmd_get_capset (hw/display/virtio-gpu-3d.c) where processing a VIRTIO_GPU_CMD_GET_CAPSET with a max capabilities size of 0 allows an unprivileged local guest user to trigger an out-of-bounds read, crash the ...

CVE-2016-10029

CVE-2016-10029 affects QEMU’s Virtio GPU Device emulator (virtio_gpu). The vulnerability is an out-of-bounds read in the virtio_gpu_set_scanout handler when a VIRTIO_GPU_CMD_SET_SCANOUT command uses a scanout id larger than num_scanouts. This local-privilege level issue can cause a guest user to ...

QEMU 'nbd/client.c' Stack Buffer Overflow Vulnerability

QEMU aka Quick Emulator is a suite of analog processor software developed by French programmer Fabrice Bellard. QEMU suffers from a stack buffer overflow vulnerability that arises from the program's failure to perform sufficient boundary checks on user-supplied data before copying it to an...

CVE-2017-2630

A stack buffer overflow flaw was found in the Quick Emulator QEMU built with the Network Block Device NBD client support. The flaw could occur while processing server's response to a 'NBDOPTLIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or...

QEMU Denial of Service Vulnerability (CNVD-2017-01853)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the 'virtio-gpu-3d.c' file in QEMU. An attacker can exploit this vulnerability to cause a QEMU...

QEMU Denial of Service Vulnerability (CNVD-2017-01855)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker could exploit this vulnerability to cause a QEMU instance to crash, resulting in...

QEMU 'virtio-crypto.c' integer overflow vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An integer overflow vulnerability exists in the virtio-crypto.c file in QEMU. An attacker can exploit the vulnerability to cause a denial of...

QEMU elevation of privilege vulnerability (CNVD-2017-00955)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A boost vulnerability exists in QEMU. An attacker can exploit this vulnerability to obtain elevated privileges...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

DEBIAN-CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

DEBIAN-CVE-2016-9845

QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

DEBIAN-CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2016-9914

Memory leak in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in FileOperations...

CVE-2016-1922

CVE-2016-1922 : QEMU built with the TPR optimization for 32-bit Windows guests is vulnerable to a NULL pointer dereference during I/O port write operations via the hmp interface , where the current_cpu may be null. This can crash the QEMU instance, causing a DoS. No patch/version details are prov...

CVE-2015-8817

CVE-2015-8817 : QEMU is vulnerable to an out-of-bounds read/write when mapping a memory address to a MemoryRegionSection using address_space_translate during pci_dma_read/write calls. This could allow a privileged guest user to crash the guest (DoS). Affected products/versions include QEMU 1.6.0–...