CVE-2016-9908

Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

CVE-2016-9907

The CVE-2016-9907 issue affects Quick Emulator (QEMU) built with usb-guest USB redirector support. It describes a memory-leak flaw that can occur while destroying the usbredir device (usbredir_handle_destroy), allowing a guest user to leak host memory and potentially cause DoS on the host. Red Ha...

CVE-2016-9923

CVE-2016-9923 affects Quick Emulator (QEMU) with the 'chardev' backend; a use-after-free can occur during hotplug/unplug of a guest device, allowing a guest user/process to crash the QEMU host process and cause DoS. Public sources (NVD) describe the flaw in QEMU’s chardev path; related advisories...

CVE-2016-9911

Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

UBUNTU-CVE-2016-9911

Quick Emulator Qemu built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehciinittransfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host...

UBUNTU-CVE-2016-9908

Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...

QEMU 'virtio-gpu-3d.c' Information Disclosure Vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. An information disclosure vulnerability exists in the virtio-gpu-3d.c file in QEMU. An attacker can exploit this vulnerability to obtain...

QEMU '/hw/display/virtio-gpu-3d.c' denial of service vulnerability

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the file /hw/display/virtio-gpu-3d.c in QEMU. An attacker can exploit this vulnerability to cause ...

ALPINE-CVE-2016-7995

Memory leak in the ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of crafted buffer page select PG indexes...

DEBIAN-CVE-2016-7157

The 1 mptsasconfigmanufacturing1 and 2 mptsasconfigioc0 functions in hw/scsi/mptconfig.c in QEMU aka Quick Emulator allow local guest OS administrators to cause a denial of service QEMU process crash via vectors involving MPTSASCONFIGPACK...

CVE-2016-6888

CVE-2016-6888 in QEMU (net_tx_pkt_init in hw/net/net_tx_pkt.c) has an integer overflow when handling the maximum fragmentation count, triggering an unchecked multiplication and a NULL pointer dereference. This allows a local privileged user/guest to cause a denial of service (QEMU process crash)....

CVE-2016-6835

The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer over-read by leveraging failure to check IP header length...

CVE-2016-4964

CVE-2016-4964 : In QEMU, the mptsas_fetch_requests function (hw/scsi/mptsas.c) allows a local guest OS administrator to trigger a denial of service via vectors involving s->state, potentially causing an infinite loop, CPU exhaustion, or QEMU process crash. The provided documents do not specify...

CVE-2016-6888

Integer overflow in the nettxpktinit function in hw/net/nettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU process crash via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference...

CVE-2016-6834

CVE-2016-6834 affects QEMU (net_tx_pkt_do_sw_fragmentation in hw/net/net_tx_pkt.c). The issue allows a local guest OS administrator to trigger a denial of service by sending a zero-length current fragment length, causing an infinite loop and QEMU process crash. Connected documents confirm this CV...

CVE-2016-7422

CVE-2016-7422 affects QEMU’s virtio/virtio.c: virtqueue_map_desc allows a local guest OS administrator to trigger a NULL pointer dereference by using a large I/O descriptor buffer length, leading to QEMU process crash. Remediation in connected docs shows fixes via rebases to QEMU 2.9.0 (RHSA-2017...

ALPINE-CVE-2016-9106

Memory leak in the v9fswrite function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption by leveraging failure to free an IO vector...

ALPINE-CVE-2016-9105

Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors involving a reference to the source fid object...

DEBIAN-CVE-2016-9105

Memory leak in the v9fslink function in hw/9pfs/9p.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via vectors involving a reference to the source fid object...

CVE-2016-9102

CVE-2016-9102 is a memory-leak vulnerability in QEMU's 9pfs/9p.c v9fs_xattrcreate path. The issue allows a local privileged user (guest) to trigger memory consumption escalating to a DoS by sending a large number of Txattrcreate messages with the same fid. Affected component: hw/9pfs/9p.c (v9fs_x...