qemu qemu vulnerabilities and exploits

(subscribe to this query)

The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arb...

Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1 Qemu Qemu 0.4.2

1 Article

The change_process_uid function in os-posix.c in Qemu 0.14.0 and previous versions does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Buffer overflow in hw/ssi/pl022.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU prior to 1.7.2 allows remote malicious users to execute arbitrary code via a crafted arglen value in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU prior to 1.7.2 allow remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_star...

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Buffer overflow in scoop_gpio_handler_update in QEMU prior to 1.7.2 might allow remote malicious users to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Buffer overflow in hw/ide/ahci.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Buffer overflow in target-arm/machine.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU prior to 1.7.2 allows remote malicious users to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image.

Qemu Qemu Qemu Qemu 0.1.0 Qemu Qemu 0.1.1 Qemu Qemu 0.1.2 Qemu Qemu 0.1.3 Qemu Qemu 0.1.4 Qemu Qemu 0.1.5 Qemu Qemu 0.1.6 Qemu Qemu 0.2.0 Qemu Qemu 0.3.0 Qemu Qemu 0.4.0 Qemu Qemu 0.4.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook