PT-2014-2815

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to a buffer overflow in the hw/pci/pcie aer.c file. This can be exploited by remote attackers to cause a denial of service and potentially execute arbitrary code. The exploitation i...

PT-2014-2825

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description A buffer overflow issue exists in the scoop gpio handler update function. This could potentially allow remote attackers to execute arbitrary code by providing a large value for prev level, gpio level, o...

PT-2014-2816

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to a buffer overflow in the hw/ssi/pl022.c file, which can be triggered by remote attackers sending crafted tx fifo head and rx fifo head values in a savevm image. This can cause a...

PT-2014-2826

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to the usb device post load function in hw/usb/bus.c, which might allow remote attackers to execute arbitrary code via a crafted savevm image. This is due to a negative setup len or...

CVE-2013-4531

Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative value in cpregvmstatearraylen in a savevm image...

PT-2014-2827

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to the virtio scsi load request function in hw/scsi/scsi-bus.c, which might allow remote attackers to execute arbitrary code via a crafted savevm image. This is due to an...

PT-2014-2821

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read. Recommendations For versions prior to 1.7.2, update to version 1.7...

PT-2014-2824

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue is related to multiple buffer overflows in the tsc210x load function, which might allow remote attackers to execute arbitrary code. This can be achieved by crafting specific values in a savevm...

CVE-2013-4535

The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...

UBUNTU-CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

CVE-2013-4148

Integer signedness error in the virtionetload function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow...

PT-2014-2822

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image. This is related to the ssi sd transfer function in hw/sd/ssi-sd.c. Recommendations For versions...

CVE-2013-4533

Buffer overflow in the pxa2xxsspload function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-rxlevel value in a savevm image...

UBUNTU-CVE-2013-4540

Buffer overflow in scoopgpiohandlerupdate in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large 1 prevlevel, 2 gpiolevel, or 3 gpiodir value in a savevm image...

CVE-2013-6399

Array index error in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image...

UBUNTU-CVE-2013-4536

An user able to alter the savevm data either on the disk or over the wire during migration could use this flaw to to corrupt QEMU process memory on the destination host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...

PT-2014-2745

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write in the virtio load function. Recommendations For versions prior to 1.7.2,...

PT-2013-1326

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the savevm functionality of the QEMU hardware emulator, which can be exploited to alter savevm data. This could allow an attacker to access confidential data, compromise...

CentOS 5 : kvm (CESA-2010:0088)

Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...