CVE-2016-9923

CVE-2016-9923 affects Quick Emulator (QEMU) with the 'chardev' backend; a use-after-free can occur during hotplug/unplug of a guest device, allowing a guest user/process to crash the QEMU host process and cause DoS. Public sources (NVD) describe the flaw in QEMU’s chardev path; related advisories...

CVE-2016-9912

CVE-2016-9912 affects QEMU with Virtio GPU Device emulator support. The issue is a memory leakage bug that occurs when destroying a gpu resource object in virtio_gpu_resource_destroy, allowing a guest user/process to leak host memory and potentially cause a host DoS. The available references (Fed...

CVE-2016-9911

CVE-2016-9911 (QEMU) : A memory leak vulnerability in QEMU built with USB EHCI emulation. The leak occurs while processing packet data in ehci_init_transfer, allowing a guest user/process to leak host memory and potentially cause a DoS on the host. The available connected documents confirm the pr...

CVE-2016-9907

The CVE-2016-9907 issue affects Quick Emulator (QEMU) built with usb-guest USB redirector support. It describes a memory-leak flaw that can occur while destroying the usbredir device (usbredir_handle_destroy), allowing a guest user to leak host memory and potentially cause DoS on the host. Red Ha...

UBUNTU-CVE-2016-9908

Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

UBUNTU-CVE-2016-9911

Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

QEMU '/hw/display/virtio-gpu-3d.c' denial of service vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the file /hw/display/virtio-gpu-3d.c in QEMU. An attacker can exploit this vulnerability to cause ...

QEMU 'virtio-gpu-3d.c' Information Disclosure Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An information disclosure vulnerability exists in the virtio-gpu-3d.c file in QEMU. An attacker can exploit this vulnerability to obtain...

ALPINE-CVE-2016-7995

Memory leak in the ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of crafted buffer page select PG indexes...

DEBIAN-CVE-2016-7157

The 1 mptsasconfigmanufacturing1 and 2 mptsasconfigioc0 functions in hw/scsi/mptconfig.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via vectors involving MPTSASCONFIGPACK...

CVE-2016-6834

CVE-2016-6834 affects QEMU (net_tx_pkt_do_sw_fragmentation in hw/net/net_tx_pkt.c). The issue allows a local guest OS administrator to trigger a denial of service by sending a zero-length current fragment length, causing an infinite loop and QEMU process crash. Connected documents confirm this CV...

CVE-2016-7422

CVE-2016-7422 affects QEMU’s virtio/virtio.c: virtqueue_map_desc allows a local guest OS administrator to trigger a NULL pointer dereference by using a large I/O descriptor buffer length, leading to QEMU process crash. Remediation in connected docs shows fixes via rebases to QEMU 2.9.0 (RHSA-2017...

CVE-2016-4964

CVE-2016-4964 : In QEMU, the mptsas_fetch_requests function (hw/scsi/mptsas.c) allows a local guest OS administrator to trigger a denial of service via vectors involving s->state, potentially causing an infinite loop, CPU exhaustion, or QEMU process crash. The provided documents do not specify...

CVE-2016-6888

CVE-2016-6888 in QEMU (net_tx_pkt_init in hw/net/net_tx_pkt.c) has an integer overflow when handling the maximum fragmentation count, triggering an unchecked multiplication and a NULL pointer dereference. This allows a local privileged user/guest to cause a denial of service (QEMU process crash)....

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

CVE-2016-6888

Integer overflow in the nettxpktinit function in hw/net/nettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU process crash via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference...

ALPINE-CVE-2016-9106

Memory leak in the v9fswrite function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption by leveraging failure to free an IO vector...

ALPINE-CVE-2016-9105

Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors involving a reference to the source fid object...

DEBIAN-CVE-2016-9105

Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors involving a reference to the source fid object...

CVE-2016-9105

CVE-2016-9105 applies to QEMU, describing a memory leak in the v9fs_link function of hw/9pfs/9p.c that can be triggered by a reference to the source fid object, leading to denial of service via memory consumption. The IBM PowerKVM bulletin notes a fix in PowerKVM: version 3.1.0.2 (and PowerKVM 2....