Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:qemu:qemu:2.9.0:rc0:*:*:*:*:*:*
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2017-7471 |
Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host. Published: July 09, 2018; 10:29:00 AM -0400 |
V3.1: 9.0 CRITICAL V2.0: 7.7 HIGH |
CVE-2017-9373 |
Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device. Published: June 16, 2017; 6:29:00 PM -0400 |
V3.1: 5.5 MEDIUM V2.0: 1.9 LOW |
CVE-2017-8086 |
Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable. Published: May 02, 2017; 10:59:00 AM -0400 |
V3.1: 6.5 MEDIUM V2.0: 4.9 MEDIUM |
CVE-2017-7718 |
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions. Published: April 20, 2017; 1:59:01 PM -0400 |
V3.1: 5.5 MEDIUM V2.0: 2.1 LOW |
CVE-2017-7377 |
The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid. Published: April 10, 2017; 11:59:00 AM -0400 |
V3.1: 6.0 MEDIUM V2.0: 2.1 LOW |
CVE-2017-5987 |
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer. Published: March 20, 2017; 12:59:02 PM -0400 |
V3.1: 5.5 MEDIUM V2.0: 2.1 LOW |
CVE-2017-5579 |
Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. Published: March 15, 2017; 11:59:00 AM -0400 |
V3.1: 6.5 MEDIUM V2.0: 4.9 MEDIUM |
CVE-2016-8667 |
The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value. Published: November 04, 2016; 5:59:03 PM -0400 |
V3.1: 6.0 MEDIUM V2.0: 2.1 LOW |
CVE-2016-7907 |
The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags. Published: October 05, 2016; 12:59:10 PM -0400 |
V3.1: 4.4 MEDIUM V2.0: 2.1 LOW |