Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2439-1
HistoryDec 11, 2014 - 12:00 a.m.

QEMU vulnerabilities

2014-12-1100:00:00
ubuntu.com
38

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON

Releases

  • Ubuntu 14.10
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04
  • Ubuntu 10.04

Packages

  • qemu - Machine emulator and virtualizer
  • qemu-kvm - Machine emulator and virtualizer

Details

Michael S. Tsirkin discovered that QEMU incorrectly handled certain
parameters during ram load while performing a migration. An attacker able
to manipulate savevm data could use this issue to possibly execute
arbitrary code on the host. This issue only affected Ubuntu 12.04 LTS,
Ubuntu 14.04 LTS, and Ubuntu 14.10. (CVE-2014-7840)

Paolo Bonzini discovered that QEMU incorrectly handled memory in the Cirrus
VGA device. A malicious guest could possibly use this issue to write into
memory of the host, leading to privilege escalation. (CVE-2014-8106)

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchqemu-system< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-guest-agent< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-kvm< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-arm< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-common< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-mips< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-misc< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-ppc< 2.1+dfsg-4ubuntu6.3UNKNOWN
Ubuntu14.10noarchqemu-system-sparc< 2.1+dfsg-4ubuntu6.3UNKNOWN
Rows per page:
1-10 of 411

Related

nessus 30
openvas 25
mageia 1
fedora 7
gentoo 1
redhat 7
centos 2
veracode 2
prion 2
ubuntucve 3
debiancve 2
cve 2
osv 2
oraclelinux 2
debian 4
securityvulns 2
f5 2
suse 3
nessus
nessus
Mandriva Linux Security Advisory : qemu (MDVSA-2014:249)
2014-12-15 00:00:00
SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2015:0349-1)
2015-05-20 00:00:00
Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2439-1)
2014-12-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2439-1)
2022-08-26 00:00:00
Mageia: Security Advisory (MGASA-2014-0525)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0349-1)
2021-04-19 00:00:00
mageia
mageia
Updated qemu packages fix security vulnerabilities
2014-12-13 23:16:05
fedora
fedora
[SECURITY] Fedora 21 Update: qemu-2.1.3-5.fc21
2015-04-13 07:05:24
[SECURITY] Fedora 21 Update: qemu-2.1.3-7.fc21
2015-05-17 06:38:09
[SECURITY] Fedora 21 Update: qemu-2.1.3-8.fc21
2015-06-21 00:16:05
gentoo
gentoo
QEMU: Multiple Vulnerabilities
2014-12-24 00:00:00
redhat
redhat
(RHSA-2015:0349) Important: qemu-kvm security, bug fix, and enhancement update
2015-03-05 00:00:00
(RHSA-2015:0624) Important: qemu-kvm-rhev security, bug fix, and enhancement update
2015-03-05 09:19:16
(RHSA-2015:0795) Important: qemu-kvm-rhev security update
2015-04-09 00:00:00
centos
centos
libcacard, qemu security update
2015-03-17 13:29:43
qemu security update
2015-04-22 09:45:47
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:12:35
Arbitrary Code Execution
2019-01-15 09:05:03
prion
prion
Design/Logic Flaw
2014-12-12 15:59:00
Heap overflow
2014-12-08 16:59:00
ubuntucve
ubuntucve
CVE-2014-7840
2014-11-14 00:00:00
CVE-2014-8106
2014-12-08 00:00:00
CVE-2017-2615
2017-02-01 00:00:00
debiancve
debiancve
CVE-2014-7840
2014-12-12 15:59:00
CVE-2014-8106
2014-12-08 16:59:00
cve
cve
CVE-2014-7840
2014-12-12 15:59:00
CVE-2014-8106
2014-12-08 16:59:00
osv
osv
qemu - security update
2014-12-04 00:00:00
qemu-kvm - security update
2014-12-04 00:00:00
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2015-04-21 00:00:00
qemu-kvm security, bug fix, and enhancement update
2015-03-11 00:00:00
debian
debian
[SECURITY] [DSA 3088-1] qemu-kvm security update
2014-12-04 13:44:52
[SECURITY] [DSA 3087-1] qemu security update
2014-12-04 13:44:23
[SECURITY] [DSA 3088-1] qemu-kvm security update
2014-12-04 13:44:52
securityvulns
securityvulns
[SECURITY] [DSA 3087-1] qemu security update
2014-12-08 00:00:00
qemu multiple security vulnerabilities
2014-12-08 00:00:00
f5
f5
SOL63519101 - Multiple QEMU vulnerabilities
2016-02-16 00:00:00
K63519101 : Multiple QEMU vulnerabilities
2016-02-16 00:00:00
suse
suse
Security update for xen (important)
2017-03-17 12:10:10
Security update for xen (important)
2017-03-10 00:07:36
Security update for xen (important)
2017-03-01 00:33:56

8.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.079 Low

EPSS

Percentile

94.2%

JSON
Related for USN-2439-1
nessus30openvas25mageia1fedora7gentoo1redhat7centos2veracode2prion2ubuntucve3debiancve2cve2osv2oraclelinux2debian4securityvulns2f52suse3