Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

qemu qemu 0.11.0-rc1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-0297
Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU prior to 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafte...
Qemu Qemu 0.1.6Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.5.5Qemu Qemu 0.10.1Qemu Qemu 0.9.0Qemu Qemu 0.7.2Qemu Qemu 0.1.3Qemu Qemu 0.7.1Qemu Qemu 0.9.1-5Qemu Qemu 0.5.0Qemu Qemu 0.8.1Qemu Qemu 0.11.0-rc2Qemu Qemu 0.10.0Qemu Qemu 0.4.1Qemu QemuQemu Qemu 0.5.2
NA
CVE-2011-2527
The change_process_uid function in os-posix.c in Qemu 0.14.0 and previous versions does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Qemu Qemu 0.12.4Qemu Qemu 0.12.0Qemu Qemu 0.11.0Qemu Qemu 0.10.2Qemu Qemu 0.9.1Qemu Qemu 0.7.1Qemu Qemu 0.7.0Qemu Qemu 0.3.0Qemu Qemu 0.2.0Qemu Qemu 0.15.0Qemu Qemu 0.1.5Qemu Qemu 0.11.0-rc1Qemu Qemu 0.13.0Qemu Qemu 0.12.1Qemu Qemu 0.10.5Qemu Qemu 0.9.1-5Qemu Qemu 0.9.0Qemu Qemu 0.6.1Qemu Qemu 0.6.0Qemu QemuQemu Qemu 0.12.3Qemu Qemu 0.12.2
NA
CVE-2011-2212
Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and previous versions allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."
Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu Qemu 0.1.6Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1Qemu Qemu 0.9.0Qemu Qemu 0.7.2Qemu Qemu 0.12.5Qemu Qemu 0.1.3Qemu Qemu 0.14.0Qemu Qemu 0.11.1Qemu Qemu 0.7.1Qemu Qemu 0.9.1-5
NA
CVE-2011-1751
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arb...
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu Qemu 1.1Qemu Qemu 0.1.6Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1Qemu Qemu 0.9.0Qemu Qemu 0.7.2Qemu Qemu 0.12.5Qemu Qemu 0.1.3Qemu Qemu 0.14.0Qemu Qemu 0.11.1
NA
CVE-2013-4538
Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU prior to 1.7.2 allow remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_star...
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
NA
CVE-2013-4539
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
NA
CVE-2013-4540
Buffer overflow in scoop_gpio_handler_update in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
NA
CVE-2013-4537
The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary code via a crafted arglen value in a savevm image.
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
NA
CVE-2013-4526
Buffer overflow in hw/ide/ahci.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
NA
CVE-2013-4530
Buffer overflow in hw/ssi/pl022.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.
Qemu Qemu 1.0Qemu Qemu 0.12.2Qemu Qemu 0.12.0Qemu QemuQemu Qemu 1.1Qemu Qemu 1.6.0Qemu Qemu 0.1.6Qemu Qemu 1.5.0Qemu Qemu 0.13.0Qemu Qemu 0.5.3Qemu Qemu 0.4.2Qemu Qemu 0.10.3Qemu Qemu 1.5.3Qemu Qemu 0.15.2Qemu Qemu 0.11.0-rc1Qemu Qemu 0.1.5Qemu Qemu 1.5.1Qemu Qemu 0.5.1Qemu Qemu 0.8.2Qemu Qemu 0.11.0Qemu Qemu 0.5.5Qemu Qemu 0.10.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook