853 matches found
CVE-2019-12155
interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...
CVE-2019-12155: NULL Pointer Dereference
interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference...
PT-2019-4600
Name of the Vulnerable Software and Affected Versions QEMU versions 3.1.x through 4.0.0 Description The issue is related to a NULL pointer dereference in the interface release resource function in hw/display/qxl.c. This could potentially allow a remote attacker to cause a denial of service. The...
PT-2019-6090
Name of the Vulnerable Software and Affected Versions QEMU version 3.1.50 Description The issue is related to a NULL pointer dereference in the QEMU emulator, specifically in the hw/sparc64/sun4u.c file. This allows an attacker to cause a denial of service. The vulnerability is also described as...
CVE-2019-5008: NULL Pointer Dereference
hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver...
CVE-2018-18849
In Qemu 3.0.0, lsidomsgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msglen value...
CVE-2019-8934
hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest...
CVE-2019-8934: Exposure of Resource to Wrong Sphere
hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest...
CVE-2019-6501: Out-of-bounds Read
In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...
CVE-2018-18849: Out-of-bounds Read
In Qemu 3.0.0, lsidomsgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msglen value...
PT-2019-6087
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 3.1.0 Description The issue is related to information exposure due to the hypervisor sharing system attributes with a guest, specifically the /proc/device-tree/system-id and /proc/device-tree/model. This is caused by...
CVE-2019-3812
QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2cddc function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host...
CVE-2019-3812: Improper Restriction of Operations within the Bounds of a Memory Buffer
QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2cddc function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host...
Design/Logic Flaw
On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...
PT-2018-2895
Name of the Vulnerable Software and Affected Versions VipNet Coordinator HW affected versions not specified Description The issue is related to a memory overflow on the hard disk of the VipNet Coordinator HW information protection hardware and software complex. Exploitation of this issue could...
PT-2018-2896
Name of the Vulnerable Software and Affected Versions VipNet Coordinator HW affected versions not specified Description The issue exists due to incorrect processing of the F field in the OFS command. This can allow a remote attacker to execute arbitrary code or cause a crash, disrupting informati...
CVE-2018-20124
hw/rdma/rdmabackend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large numsge value...
CVE-2018-20191
hw/rdma/vmw/pvrdmamain.c in QEMU does not implement a read operation such as uarread by analogy to uarwrite, which allows attackers to cause a denial of service NULL pointer dereference...
