Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
kvm vulnerabilities and exploits
(subscribe to this query)
5.5
CVSSv3
CVE-2019-6501
In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
Qemu Qemu 3.1
Fedoraproject Fedora 30
NA
CVE-2013-4526
Buffer overflow in hw/ide/ahci.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4530
Buffer overflow in hw/ssi/pl022.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4531
Buffer overflow in target-arm/machine.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4533
Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4534
Buffer overflow in hw/intc/openpic.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4537
The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary code via a crafted arglen value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
5.6
CVSSv3
CVE-2020-13765
rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows malicious users to trigger an invalid memory copy operation.
Qemu Qemu 4.0.0
Qemu Qemu 4.1.0
Canonical Ubuntu Linux 18.04
Canonical Ubuntu Linux 20.04
Canonical Ubuntu Linux 16.04
Debian Debian Linux 8.0
Debian Debian Linux 9.0
NA
CVE-2013-4538
Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU prior to 1.7.2 allow remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_star...
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
NA
CVE-2013-4539
Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
Qemu Qemu 1.0
Qemu Qemu 0.12.2
Qemu Qemu 0.12.0
Qemu Qemu
Qemu Qemu 1.1
Qemu Qemu 1.6.0
Qemu Qemu 0.1.6
Qemu Qemu 1.5.0
Qemu Qemu 0.13.0
Qemu Qemu 0.5.3
Qemu Qemu 0.4.2
Qemu Qemu 0.10.3
Qemu Qemu 1.5.3
Qemu Qemu 0.15.2
Qemu Qemu 0.11.0-rc1
Qemu Qemu 0.1.5
Qemu Qemu 1.5.1
Qemu Qemu 0.5.1
Qemu Qemu 0.8.2
Qemu Qemu 0.11.0
Qemu Qemu 0.5.5
Qemu Qemu 0.10.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »