Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kvm group qemu-kvm vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2512
The virtio_queue_notify in qemu-kvm 0.14.0 and previous versions does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio ...
Kvm Group Qemu-kvm 0.12Kvm Group Qemu-kvm
NA
CVE-2012-0029
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Kvm Group Qemu-kvm 0.12
NA
CVE-2011-2527
The change_process_uid function in os-posix.c in Qemu 0.14.0 and previous versions does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Qemu Qemu 0.12.4Qemu Qemu 0.12.0Qemu Qemu 0.11.0Qemu Qemu 0.10.2Qemu Qemu 0.9.1Qemu Qemu 0.7.1Qemu Qemu 0.7.0Qemu Qemu 0.3.0Qemu Qemu 0.2.0Qemu Qemu 0.15.0Qemu Qemu 0.1.5Qemu Qemu 0.11.0-rc1Qemu Qemu 0.13.0Qemu Qemu 0.12.1Qemu Qemu 0.10.5Qemu Qemu 0.9.1-5Qemu Qemu 0.9.0Qemu Qemu 0.6.1Qemu Qemu 0.6.0Qemu QemuQemu Qemu 0.12.3Qemu Qemu 0.12.2
NA
CVE-2011-2212
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and previous versions allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu Qemu 0.1.6Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1Qemu Qemu 0.9.0Qemu Qemu 0.7.2Qemu Qemu 0.12.5Qemu Qemu 0.1.3Qemu Qemu 0.14.0Qemu Qemu 0.11.1Qemu Qemu 0.7.1Qemu Qemu 0.9.1-5
5.6
CVSSv3
CVE-2019-11091
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products c...
Intel Microarchitectural Data Sampling Uncacheable Memory Firmware -Fedoraproject Fedora 29
5.6
CVSSv3
CVE-2018-12126
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found...
Intel Microarchitectural Store Buffer Data Sampling Firmware -Fedoraproject Fedora 29
5.6
CVSSv3
CVE-2018-12127
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here:...
Intel Microarchitectural Load Port Data Sampling Firmware -Fedoraproject Fedora 29
5.6
CVSSv3
CVE-2018-12130
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found h...
Intel Microarchitectural Fill Buffer Data Sampling Firmware -Fedoraproject Fedora 29
7.8
CVSSv3
CVE-2022-0358
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory...
Qemu QemuRedhat Enterprise Linux 8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook