CVE-2008-4539

The connected documents describe a heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) of QEMU, affecting versions prior to a certain fix. The CVE-2014-8106 entry specifies Cirrus VGA heap overflow in QEMU before 2.2.0 and notes it exists due to an incomplete fix for C...

CVE-2008-2382

CVE-2008-2382 relates to a remote DoS in the VNC server component of Qemu (0.9.1 and earlier) and KVM (kvm-79 and earlier). The vulnerability stems from protocol_client_msg handling in vnc.c, where a crafted VNC message (notably with data starting with 0x02) can trigger an infinite loop, causing ...

CVE-2010-0419

CVE-2010-0419 concerns the KVM x86 emulator where the segment-selector write restriction in the emulator can be bypassed in SMP guest configurations, potentially allowing a guest user to crash the guest or escalate privileges within the guest via access to an IO port or MMIO region. Public adviso...

CVE-2010-0306

The connected MiracleLinux AXSA advisory references CVE-2010-0306, describing a vulnerability in the KVM x86 emulator: when a guest is SMP-configured, CPL/IOPL checks are not applied to memory access for CPL3 code. This allows guest OS users to crash the guest or potentially gain privileges by ab...