Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
qemu qemu 0.15.0 vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2011-3346
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU prior to 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulner...
Xen Xen -
Qemu Qemu 0.15.0
Redhat Enterprise Linux 5
Qemu Qemu
6.8
CVSSv2
CVE-2011-4111
Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU prior to 0.15.2 and 1.x prior to 1.0-rc4 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted VSC_ATR message.
Redhat Enterprise Linux Server Supplementary 6.1.z
Redhat Enterprise Linux 6.0
Qemu Qemu 1.0
Qemu Qemu 0.15.0
Qemu Qemu
2.1
CVSSv2
CVE-2011-2527
The change_process_uid function in os-posix.c in Qemu 0.14.0 and previous versions does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.
Qemu Qemu 0.12.4
Qemu Qemu 0.12.0
Qemu Qemu 0.11.0
Qemu Qemu 0.10.2
Qemu Qemu 0.9.1
Qemu Qemu 0.7.1
Qemu Qemu 0.7.0
Qemu Qemu 0.3.0
Qemu Qemu 0.2.0
Qemu Qemu 0.15.0
Qemu Qemu 0.1.5
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.13.0
Qemu Qemu 0.12.1
Qemu Qemu 0.10.5
Qemu Qemu 0.9.1-5
Qemu Qemu 0.9.0
Qemu Qemu 0.6.1
Qemu Qemu 0.6.0
Qemu Qemu
Qemu Qemu 0.12.3
Qemu Qemu 0.12.2
7.4
CVSSv2
CVE-2011-1751
The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arb...
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu 1.1
Qemu Qemu 0.1.6
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
Qemu Qemu 0.9.0
Qemu Qemu 0.7.2
Qemu Qemu 0.12.5
Qemu Qemu 0.1.3
Qemu Qemu 0.14.0
Qemu Qemu 0.11.1
1 Article
7.5
CVSSv2
CVE-2013-4538
Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU prior to 1.7.2 allow remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_star...
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
7.5
CVSSv2
CVE-2013-4539
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
7.5
CVSSv2
CVE-2013-4540
Buffer overflow in scoop_gpio_handler_update in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
7.5
CVSSv2
CVE-2013-4537
The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary code via a crafted arglen value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
7.5
CVSSv2
CVE-2013-4526
Buffer overflow in hw/ide/ahci.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
7.5
CVSSv2
CVE-2013-4530
Buffer overflow in hw/ssi/pl022.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »