ALPINE-CVE-2017-5552

Memory leak in the virglresourceattachbacking function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...

DEBIAN-CVE-2017-5578

Memory leak in the virtiogpuresourceattachbacking function in hw/display/virtio-gpu.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...

CVE-2017-5552

CVE-2017-5552 describes a memory leak in QEMU’s virtio-gpu-3d device, specifically in hw/display/virtio-gpu-3d.c via virgl_resource_attach_backing. The vulnerability allows a local guest OS user to cause a host DoS by exhausting memory through a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACK...

DEBIAN-CVE-2017-6505

The ohciserviceedlist function in hw/usb/hcd-ohci.c in QEMU aka Quick Emulator before 2.9.0 allows local guest OS users to cause a denial of service infinite loop via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330...

CVE-2017-6505

CVE-2017-6505 affects QEMU (ohci_service_ed_list in hw/usb/hcd-ohci.c) where, before v2.9.0, an incorrect handling of the number of link endpoint list descriptors can cause an infinite loop, enabling a local attacker (guest) to trigger a denial of service. The description specifies a local-privil...

UBUNTU-CVE-2017-5552

Memory leak in the virglresourceattachbacking function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service host memory consumption via a large number of VIRTIOGPUCMDRESOURCEATTACHBACKING commands...

UBUNTU-CVE-2017-6505

The ohciserviceedlist function in hw/usb/hcd-ohci.c in QEMU aka Quick Emulator before 2.9.0 allows local guest OS users to cause a denial of service infinite loop via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330...

CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

UBUNTU-CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

Stack overflow

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

UBUNTU-CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

Stack-based buffer overflow in the vrenddecodesetframebufferstate function in vrenddecode.c in virglrenderer before 926b9b3460a48f6454d8bbe9e44313d86a65447f, as used in Quick Emulator QEMU, allows a local guest users to cause a denial of service application crash via the "nrcbufs" argument...

CVE-2017-5957

CVE-2017-5957 is a stack-based buffer overflow in the function vrend_decode_set_framebuffer_state() within virglrenderer (vrend_decode.c), used by Quick Emulator (QEMU). The overflow is triggered via the nr_cbufs argument, allowing a local guest user to crash the application (DoS). The descriptio...

Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo

Quick emulator QEMU built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrusbitbltcputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute...

CVE-2016-10028

CVE-2016-10028 affects QEMU with Virtio GPU Device emulator support. The flaw is in virgl_cmd_get_capset (hw/display/virtio-gpu-3d.c) where processing a VIRTIO_GPU_CMD_GET_CAPSET with a max capabilities size of 0 allows an unprivileged local guest user to trigger an out-of-bounds read, crash the ...

CVE-2016-10029

CVE-2016-10029 affects QEMU’s Virtio GPU Device emulator (virtio_gpu). The vulnerability is an out-of-bounds read in the virtio_gpu_set_scanout handler when a VIRTIO_GPU_CMD_SET_SCANOUT command uses a scanout id larger than num_scanouts. This local-privilege level issue can cause a guest user to ...

QEMU 'nbd/client.c' Stack Buffer Overflow Vulnerability

QEMU aka Quick Emulator is a suite of analog processor software developed by French programmer Fabrice Bellard. QEMU suffers from a stack buffer overflow vulnerability that arises from the program's failure to perform sufficient boundary checks on user-supplied data before copying it to an...

CVE-2017-2630

A stack buffer overflow flaw was found in the Quick Emulator QEMU built with the Network Block Device NBD client support. The flaw could occur while processing server's response to a 'NBDOPTLIST' request. A malicious NBD server could use this issue to crash a remote NBD client resulting in DoS or...

QEMU Denial of Service Vulnerability (CNVD-2017-01853)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in the 'virtio-gpu-3d.c' file in QEMU. An attacker can exploit this vulnerability to cause a QEMU...