CVE-2017-15289: Out-of-bounds Write

The mode4and5 write functions in hw/display/cirrusvga.c in Qemu allow local OS guest privileged users to cause a denial of service out-of-bounds write access and Qemu process crash via vectors related to dst calculation...

PT-2017-3865

Name of the Vulnerable Software and Affected Versions Qemu affected versions not specified Description The issue is related to the mode4and5 write functions in the hw/display/cirrus vga.c file of Qemu, allowing local OS guest privileged users to cause a denial of service. This can be achieved...

CVE-2017-15038: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the v9fsxattrwalk function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS users to obtain sensitive information from host heap memory via vectors related to reading extended attributes...

CVE-2017-14167: Integer Overflow or Wraparound

Integer overflow in the loadmultiboot function in hw/i386/multiboot.c in QEMU aka Quick Emulator allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write...

PT-2017-2974

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is caused by an integer overflow in the load multiboot function, located in hw/i386/multiboot.c, which is part of the QEMU emulator. This can be exploited by an attacker in the local...

CVE-2017-10806

Stack-based buffer overflow in hw/usb/redirect.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU process crash via vectors related to logging debug messages...

CVE-2017-10806: Out-of-bounds Write

Stack-based buffer overflow in hw/usb/redirect.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU process crash via vectors related to logging debug messages...

PT-2017-11517

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A stack-based buffer overflow issue exists, allowing local guest OS users to cause a denial of service by crashing the QEMU process. This issue is related to logging debug messages in the...

CVE-2017-8112

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and CPU consumption via the message ring page count...

CVE-2017-8086

Memory leak in the v9fslistxattr function in hw/9pfs/9p-xattr.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service memory consumption via vectors involving the origvalue variable...

PT-2017-18123

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator affected versions not specified Description The issue allows local guest OS privileged users to cause a denial of service, resulting in an infinite loop and CPU consumption. This is achieved via the message ring page...

CVE-2017-7718

hw/display/cirrusvgarop.h in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service out-of-bounds read and QEMU process crash via vectors related to copying VGA data via the cirrusbitbltropfwdtransp and cirrusbitbltropfwd functions...

CVE-2017-7377

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

PT-2017-17688

Name of the Vulnerable Software and Affected Versions QEMU aka Quick Emulator versions prior to the fixed version Description The issue allows local guest OS privileged users to cause a denial of service, specifically file descriptor or memory consumption, via certain vectors related to an alread...

CVE-2017-7377: Missing Release of Resource after Effective Lifetime

The 1 v9fscreate and 2 v9fslcreate functions in hw/9pfs/9p.c in QEMU aka Quick Emulator allow local guest OS privileged users to cause a denial of service file descriptor or memory consumption via vectors related to an already in-use fid...

CVE-2017-7398: Cross-Site Request Forgery (CSRF)

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

CVE-2017-5931

Integer overflow in hw/virtio/virtio-crypto.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service QEMU process crash or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow...

CVE-2016-9922

The cirrusdocopy function in hw/display/cirrusvga.c in QEMU aka Quick Emulator, when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service divide-by-zero error and QEMU process crash via vectors involving blit pitch values...

CVE-2016-9922: Divide By Zero

The cirrusdocopy function in hw/display/cirrusvga.c in QEMU aka Quick Emulator, when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service divide-by-zero error and QEMU process crash via vectors involving blit pitch values...

PT-2017-1620

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the sdhci sdma transfer multi blocks function in hw/sd/sdhci.c, which allows local OS guest privileged users to cause a denial of service. This can be achieved via vector...