SUSE CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

SUSE CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

SUSE CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

The vulnerability of the `virgl_cmd_get_capset_info()` function in the `contrib/vhost-user-gpu/virgl.c` component of the QEMU hardware emulation software, related to the disclosure of information, allows a malicious actor to gain access to confidential data.

The vulnerability of the virglcmdgetcapsetinfo function in the contrib/vhost-user-gpu/virgl.c component of the QEMU hardware emulation software is related to the disclosure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...

The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `virgl_cmd_get_capset` function in the `hw/display/virtio-gpu-3d.c` component of the QEMU hardware emulation software occurs due to reading data beyond the buffer’s acceptable limits. This allows an attacker to trigger a service failure.

The vulnerability of the virglcmdgetcapset function in the hw/display/virtio-gpu-3d.c component of the QEMU hardware emulation software is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure using the...

An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.

...

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host resulting in a denial of service condition or potential code execution with the privileges of the QEMU process.

...

DEBIAN-CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

UBUNTU-CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...

UBUNTU-CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that originates from a boundary error in the virglcmdgetcapset function of...

PT-2021-5462

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description The issue is related to an out-of-bounds write vulnerability in the virtio vhost-user GPU device of QEMU. This vulnerability occurs while processing the VIRTIO GPU CMD GET CAPSET command from t...

PT-2021-5459

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description An information disclosure issue exists in the virtio vhost-user GPU device of QEMU, specifically in the virgl cmd get capset info function in contrib/vhost-user-gpu/virgl.c. This issue could...

DEBIAN-CVE-2016-10028

The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.

The vulnerability of the Virtio GPU emulation hardware support in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to cause a service failure or otherwise affect the system as a result of reversing the VIRTIOGPUCMDGETCAPSET...

The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.

The vulnerability of the Virtio GPU emulation software in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder, operating locally, to trigger a service failure or cause other effects on the system as a result of updating the cursor data...

DEBIAN-CVE-2016-9845

QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

PT-2016-3008

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to an information leakage problem in QEMU when built with Virtio GPU Device emulator support. It occurs while processing the 'VIRTIO GPU CMD GET CAPSET INFO' command, allowi...