Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

qemu qemu 1.1 vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2

CVE-2014-9718

The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 up to and including 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and sys...
Debian Debian Linux 8.0Qemu Qemu 1.0Qemu Qemu 1.0.1Qemu Qemu 1.1Qemu Qemu 1.4.1Qemu Qemu 1.4.2Qemu Qemu 1.5.0Qemu Qemu 1.5.1Qemu Qemu 1.5.2Qemu Qemu 1.5.3Qemu Qemu 1.6.0Qemu Qemu 1.6.1
4.9
CVSSv2

CVE-2013-4544

hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and previous versions allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from ...
Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.10Canonical Ubuntu Linux 14.04Qemu QemuQemu Qemu 1.0Qemu Qemu 1.0.1Qemu Qemu 1.1Qemu Qemu 1.4.1Qemu Qemu 1.4.2Qemu Qemu 1.5.0
7.4
CVSSv2

CVE-2011-1751

The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arb...
Qemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1Qemu Qemu 0.4.2
7.5
CVSSv2

CVE-2013-4526

Buffer overflow in hw/ide/ahci.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4530

Buffer overflow in hw/ssi/pl022.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4531

Buffer overflow in target-arm/machine.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4533

Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4534

Buffer overflow in hw/intc/openpic.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4539

Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
7.5
CVSSv2

CVE-2013-4537

The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary code via a crafted arglen value in a savevm image.
Qemu QemuQemu Qemu 0.1.0Qemu Qemu 0.1.1Qemu Qemu 0.1.2Qemu Qemu 0.1.3Qemu Qemu 0.1.4Qemu Qemu 0.1.5Qemu Qemu 0.1.6Qemu Qemu 0.2.0Qemu Qemu 0.3.0Qemu Qemu 0.4.0Qemu Qemu 0.4.1
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
physicalprivilegeCVE-2025-26475cozystay - hotel booking wordpress themeCVE-2025-1316CVE-2024-27564CVE-2025-29137dellCVE-2025-25589hcl softwareloftoceaninjectCVE-2025-30140
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook