The vulnerability of Xen hypervisors allows a perpetrator to execute arbitrary code.

The vulnerability of the IDE subsystem of the QEMU component in the Xen hypervisor is caused by a buffer overflow. Exploiting this vulnerability allows an attacker acting locally to execute arbitrary code when the compact disk drive is turned on...

DEBIAN-CVE-2014-9718

The 1 BMDMA and 2 AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service memory consumption or infinite loop, and system crash via a PRDT with zero complete...