GHSA-V6W7-GQ3G-FWVM vulnerabilities

Vulnerabilities for packages: qemu...

EUVD-2015-8543

Malware in sbrugna...

EUVD-2021-26857

Malware in sbrugna...

EUVD-2015-3277

Malware in sbrugna...

EUVD-2015-5173

Malware in sbrugna...

EUVD-2018-17517

Malware in sbrugna...

EUVD-2020-23175

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-12829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while handling MMIO writ...

Azure Linux 3.0 Security Update: qemu (CVE-2024-6505)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6505 advisory. - A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card...

CBL Mariner 2.0 Security Update: qemu (CVE-2024-4467)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4467 advisory. - A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file...

RHEL 7 : qemu-kvm-rhev (RHSA-2015:1718)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1718 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the...

CBL Mariner 2.0 Security Update: qemu (CVE-2023-1544)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-1544 advisory. - A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted gue...

Linux Distros Unpatched Vulnerability : CVE-2022-3872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and...

Linux Distros Unpatched Vulnerability : CVE-2022-4144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to ...

Linux Distros Unpatched Vulnerability : CVE-2021-4207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values cursor-header.width and cursor-header.height can lead to...

Linux Distros Unpatched Vulnerability : CVE-2023-2861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side,...

Linux Distros Unpatched Vulnerability : CVE-2022-0358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user c...

Linux Distros Unpatched Vulnerability : CVE-2022-26354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading ...

Linux Distros Unpatched Vulnerability : CVE-2016-7423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mptsasprocessscsiiorequest function in QEMU aka Quick Emulator, when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators...

Linux Distros Unpatched Vulnerability : CVE-2016-8909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The intelhdaxfer function in hw/audio/intel-hda.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and...