CVE-2015-5158

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAPSYSRAWIO permissions to cause a denial of service instance crash via an invalid opcode in a SCSI command descriptor block...

CVE-2015-5158: Out-of-bounds Write

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAPSYSRAWIO permissions to cause a denial of service instance crash via an invalid opcode in a SCSI command descriptor block...

CVE-2016-1568: Use After Free

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via an invalid AHCI Native Command Queuing NCQ AIO command...

PT-2016-3926

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description A buffer overflow issue exists in the hw/pt-msi.c file of Xen, specifically when using the qemu-xen-traditional device model. This issue can be exploited by local x86 HVM guest administrators to gain...

Helmholz Systeme NETLink PRO HW 1-1a-1 and FW 1. 54 and higher 弱口令

No description provided by source...

PT-2016-1740

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a use-after-free vulnerability in the hw/ide/ahci.c component of QEMU, specifically when it is built with IDE AHCI Emulation support. This vulnerability can be exploited ...

CVE-2015-7512

Buffer overflow in the pcnetreceive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service guest OS crash or execute arbitrary code via a large packet...

CVE-2015-7512: Buffer Copy without Checking Size of Input

Buffer overflow in the pcnetreceive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service guest OS crash or execute arbitrary code via a large packet...

CVE-2015-7549

The MSI-X MMIO support in hw/pci/msix.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service NULL pointer dereference and QEMU process crash by leveraging failure to define the .write method...

PT-2015-7555

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A heap-based buffer overflow issue exists in the pcnet receive function in hw/net/pcnet.c, allowing guest OS administrators to cause a denial of service instance crash or possibly execute...

CVE-2015-7295: Improper Restriction of Operations within the Bounds of a Memory Buffer

hw/virtio/virtio.c in the Virtual Network Device virtio-net support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service guest network consumption via a flood of jumbo frames on the 1 tuntap or 2 macvtap interface...

CVE-2015-6855

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WINREADNATIVEMAX command to an empty drive, which triggers a...

CVE-2015-6855: Divide By Zero

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WINREADNATIVEMAX command to an empty drive, which triggers a...

CVE-2015-5279

Heap-based buffer overflow in the ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via vectors related to receiving packets...

CVE-2015-5279: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service instance crash or possibly execute arbitrary code via vectors related to receiving packets...

PT-2015-6829

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.4.0.1 Arista affected versions not specified Description The issue allows attackers to cause a denial of service or possibly execute arbitrary code via vectors related to receiving packets. This is related to the ne200...

PT-2015-7062

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 2.4.0 Description The issue allows a guest user to cause a denial of service, resulting in the QEMU process crashing. This can be achieved by sending a crafted virtio control message. A user logged on to the guest OS can...

PT-2016-3668

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is a stack-based buffer overflow in the hw/scsi/scsi-bus.c file of QEMU, which occurs when QEMU is built with SCSI-device emulation support. This allows guest OS users with CAP SYS RAW...

CVE-2014-8106

Heap-based buffer overflow in the Cirrus VGA emulator hw/display/cirrusvga.c in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320...

OracleVM 2.2 : kernel (OVMSA-2009-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - security require root for mmapminaddr Eric Paris 518142 518143 CVE-2009-2695 - md prevent crash when accessing suspend sysfs attr Danny Feng 518135 518136 CVE-2009-2849 - nfs knfsd: fix NFSv4 OEXCL...