CVE-2017-5005

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

CVE-2017-5005

Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows remote attackers to execute arbitrary code via a crafted LCUNIXTHREAD.cmdsize field in a Mach-O file that is mishandle...

CVE-2017-5005

CNVD-2017-00081 and NVD/CVE-2017-5005 describe a stack-based buffer overflow affecting Quick Heal Internet Security, Total Security, and AntiVirus Pro on OS X (Mach-O) triggered by a crafted LC_UNIXTHREAD.cmdsize field during a Security Scan/Custom Scan. The vulnerability allows remote code execu...

CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

CVE-2015-8817

QEMU aka Quick Emulator built to use 'addressspacetranslate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pcidmaread/write calls. Affects QEMU versions = 1.6.0 and = 2.3.1. A privileged user inside guest could use this flaw to cra...

CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

DEBIAN-CVE-2015-8818

The cpuphysicalmemorywriterominternal function in exec.c in QEMU aka Quick Emulator does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service guest crash via unspecified vectors...

DEBIAN-CVE-2016-1922

QEMU aka Quick Emulator built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'currentcpu' remains null, which leads to the null pointer dereference. A user or...

DEBIAN-CVE-2016-9845

QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

CVE-2016-9914

Memory leak in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local privileged guest OS users to cause a denial of service host memory consumption and possibly QEMU process crash by leveraging a missing cleanup operation in FileOperations...

CVE-2016-9913

CVE-2016-9913 affects QEMU’s 9pfs backend (hw/9pfs/9p.c) where a memory leak in v9fs_device_unrealize_common can be triggered by the order of resource cleanup. This local privilege-adjacent issue may cause host memory consumption and potentially crash the QEMU process. The vulnerability is discus...

CVE-2016-2197

QEMU (with IDE AHCI emulation) is affected by CVE-2016-2197 due to a NULL pointer dereference when unmapping FIS and CLB entries, allowing a privileged guest user to crash the QEMU process and cause a DoS. Remediation per sources includes upgrading to a fixed release (PowerKVM advisory notes this...

CVE-2015-8745

CVE-2015-8745 affects QEMU with VMXNET3 paravirtual NIC emulation. Issue: reading Interrupt Mask Registers (IMR) can crash the QEMU process when exploited by a privileged guest (CAP_SYS_RAWIO), causing DoS. Connected data confirms the crash is tied to IMR access, not a remote exploit, and multipl...

CVE-2016-1922

CVE-2016-1922 : QEMU built with the TPR optimization for 32-bit Windows guests is vulnerable to a NULL pointer dereference during I/O port write operations via the hmp interface , where the current_cpu may be null. This can crash the QEMU instance, causing a DoS. No patch/version details are prov...

CVE-2015-8818

CVE-2015-8818 (QEMU) affects the CPU path in QEMU where cpu_physical_memory_write_rom_internal in exec.c fails to skip MMIO regions, allowing a local privileged guest user to crash the guest (DoS) via unspecified vectors. Public details confirm the issue and multiple advisories reference fixes; r...

CVE-2015-8743

CVE-2015-8743 affects QEMU with NE2000 device emulation. The flaw is an out-of-bounds read/write in ioport r/w operations, exploitable by a privileged (CAP_SYS_RAWIO) user to leak or corrupt QEMU memory. Public fixes exist (e.g., vendor security updates, notably in SUSE/OpenSUSE advisories) that ...

CVE-2016-9846

CVE-2016-9846 affects QEMU with Virtio GPU device emulation. The vulnerability is a memory leakage in virgl cursor data update (update_cursor_data_virgl), which could allow a guest user/process to leak host memory, causing a host DoS. Connected advisories (Ubuntu USN-3261-1, Fedora/Fedora-derived...

CVE-2016-1981

CVE-2016-1981 affects QEMU built with the e1000 NIC emulation. The issue is an infinite loop that can occur while processing data via transmit or receive descriptors when the initial TDH/RDH is outside the allocated descriptor buffer. A privileged user inside the guest could crash the QEMU instan...

CVE-2016-2198

CVE-2016-2198 affects QEMU when built with USB EHCI emulation. The root cause is a null pointer dereference in ehci_caps_write during writes to EHCI capability registers, which could be triggered by a privileged user inside the guest and may crash the QEMU process, causing a DoS. Technical detail...

CVE-2015-8744

CVE-2015-8744 affects QEMU when built with a VMXNET3 paravirtual NIC; the issue arises from improper/layer-2 header handling for very small frames (less than 22 bytes), which could be exploited by a privileged guest to crash the QEMU process and cause DoS. Public details in Debian/related advisor...