Записи QEMU
421 опубликованных записей вендора qemu.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 0,2 %
- Pre-auth RCE
- 29
- С записью об исправлении
- 98,1 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer51
- CWE-125 Out-of-bounds Read34
- CWE-787 Out-of-bounds Write34
- CWE-476 NULL Pointer Dereference29
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')27
- CWE-772 Missing Release of Resource after Effective Lifetime21
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
421 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2019-12928Готовый эксплойт | The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieveqemu · qemu · CWE-78 | Критическая9,8 | — | 23,0 % | 24 июн. 2019 г. |
44В плане | CVE-2015-8556Proof of concept | Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.qemu · qemu · CWE-362 | Критическая10,0 | — | 13,3 % | 24 мар. 2017 г. |
43В плане | CVE-2017-15118Proof of concept | A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an exporqemu · qemu · CWE-121 | Критическая9,8 | — | 11,9 % | 27 июл. 2018 г. |
41В плане | CVE-2016-4002Эксплойта нет | Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allowqemu · qemu · CWE-120 | Критическая9,8 | — | 6,3 % | 26 апр. 2016 г. |
41В плане | CVE-2016-7161Эксплойта нет | Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrqemu · qemu · CWE-787 | Критическая9,8 | — | 6,0 % | 5 окт. 2016 г. |
41В плане | CVE-2017-16845Эксплойта нет | hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.qemu · qemu · CWE-20 | Критическая10,0 | — | 2,9 % | 17 нояб. 2017 г. |
41В плане | CVE-2022-36648Эксплойта нет | The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers qemu · qemu · CWE-476 | Критическая10,0 | — | 1,7 % | 22 авг. 2023 г. |
40В плане | CVE-2019-12929Эксплойта нет | The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, qemu · qemu · CWE-78 | Критическая9,8 | — | 4,8 % | 24 июн. 2019 г. |
40В плане | CVE-2018-17963Эксплойта нет | qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service qemu · qemu · CWE-190 | Критическая9,8 | — | 4,6 % | 9 окт. 2018 г. |
40В плане | CVE-2016-9603Эксплойта нет | A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occurqemu · qemu · CWE-122 | Критическая9,9 | — | 4,4 % | 27 июл. 2018 г. |
40В плане | CVE-2018-20815Эксплойта нет | In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.qemu · qemu · CWE-119 | Критическая9,8 | — | 4,4 % | 31 мая 2019 г. |
40В плане | CVE-2017-8380Эксплойта нет | Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.qemu · qemu · CWE-119 | Критическая9,8 | — | 3,9 % | 28 авг. 2017 г. |
40В плане | CVE-2009-3616Эксплойта нет | Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrarqemu · qemu · CWE-416 | Критическая9,9 | — | 3,8 % | 23 окт. 2009 г. |
40В плане | CVE-2017-2620Эксплойта нет | Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue.qemu · qemu · CWE-787 | Критическая9,9 | — | 3,5 % | 27 июл. 2018 г. |
38Наблюдать | CVE-2015-7512Эксплойта нет | Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to causeqemu · qemu · CWE-120 | Критическая9,0 | — | 7,7 % | 8 янв. 2016 г. |
38Наблюдать | CVE-2012-6075Эксплойта нет | Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP andqemu · qemu · CWE-120 | Критическая9,3 | — | 4,9 % | 12 февр. 2013 г. |
37Наблюдать | CVE-2018-12617Proof of concept | qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflqemu · qemu · CWE-190 | Высокая7,5 | — | 24,5 % | 21 июн. 2018 г. |
37Наблюдать | CVE-2017-2615Эксплойта нет | Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.qemu · qemu · CWE-787 | Критическая9,1 | — | 3,6 % | 2 июл. 2018 г. |
36Наблюдать | CVE-2015-1779Эксплойта нет | The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) weqemu · qemu · CWE-400 | Высокая8,6 | — | 6,5 % | 12 янв. 2016 г. |
36Наблюдать | CVE-2016-9602Эксплойта нет | Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS.qemu · qemu · CWE-59 | Высокая8,8 | — | 3,6 % | 26 апр. 2018 г. |
36Наблюдать | CVE-2017-2630Эксплойта нет | A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support.qemu · qemu · CWE-121 | Высокая8,8 | — | 2,6 % | 27 июл. 2018 г. |
36Наблюдать | CVE-2017-7471Эксплойта нет | Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper acceqemu · qemu · CWE-732 | Критическая9,0 | — | 0,8 % | 9 июл. 2018 г. |
35Наблюдать | CVE-2015-3456Proof of concept | The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (oqemu · qemu · CWE-119 | Высокая7,7 | — | 15,2 % | 13 мая 2015 г. |
35Наблюдать | CVE-2016-4001Эксплойта нет | Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configuqemu · qemu · CWE-120 | Высокая8,6 | — | 4,9 % | 23 мая 2016 г. |
35Наблюдать | CVE-2017-15119Эксплойта нет | The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue.qemu · qemu · CWE-400 | Высокая8,6 | — | 3,2 % | 27 июл. 2018 г. |
- CVE-2019-1292860На этой неделе
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve
КритическаяCVSS 9,8Готовый эксплойтEPSS 23 %qemu · qemu24 июн. 2019 г.
- CVE-2015-855644В плане
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
КритическаяCVSS 10,0Proof of conceptEPSS 13 %qemu · qemu24 мар. 2017 г.
- CVE-2017-1511843В плане
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an expor
КритическаяCVSS 9,8Proof of conceptEPSS 11 %qemu · qemu27 июл. 2018 г.
- CVE-2016-400241В плане
Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allow
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %qemu · qemu26 апр. 2016 г.
- CVE-2016-716141В плане
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitr
КритическаяCVSS 9,8Эксплойта нетEPSS 6 %qemu · qemu5 окт. 2016 г.
- CVE-2017-1684541В плане
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %qemu · qemu17 нояб. 2017 г.
- CVE-2022-3664841В плане
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %qemu · qemu22 авг. 2023 г.
- CVE-2019-1292940В плане
The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution,
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %qemu · qemu24 июн. 2019 г.
- CVE-2018-1796340В плане
qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %qemu · qemu9 окт. 2018 г.
- CVE-2016-960340В плане
A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur
КритическаяCVSS 9,9Эксплойта нетEPSS 4 %qemu · qemu27 июл. 2018 г.
- CVE-2018-2081540В плане
In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %qemu · qemu31 мая 2019 г.
- CVE-2017-838040В плане
Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %qemu · qemu28 авг. 2017 г.
- CVE-2009-361640В плане
Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrar
КритическаяCVSS 9,9Эксплойта нетEPSS 3 %qemu · qemu23 окт. 2009 г.
- CVE-2017-262040В плане
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue.
КритическаяCVSS 9,9Эксплойта нетEPSS 3 %qemu · qemu27 июл. 2018 г.
- CVE-2015-751238Наблюдать
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause
КритическаяCVSS 9,0Эксплойта нетEPSS 7 %qemu · qemu8 янв. 2016 г.
- CVE-2012-607538Наблюдать
Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and
КритическаяCVSS 9,3Эксплойта нетEPSS 4 %qemu · qemu12 февр. 2013 г.
- CVE-2018-1261737Наблюдать
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overfl
ВысокаяCVSS 7,5Proof of conceptEPSS 24 %qemu · qemu21 июн. 2018 г.
- CVE-2017-261537Наблюдать
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.
КритическаяCVSS 9,1Эксплойта нетEPSS 3 %qemu · qemu2 июл. 2018 г.
- CVE-2015-177936Наблюдать
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) we
ВысокаяCVSS 8,6Эксплойта нетEPSS 6 %qemu · qemu12 янв. 2016 г.
- CVE-2016-960236Наблюдать
Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS.
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %qemu · qemu26 апр. 2018 г.
- CVE-2017-263036Наблюдать
A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %qemu · qemu27 июл. 2018 г.
- CVE-2017-747136Наблюдать
Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper acce
КритическаяCVSS 9,0Эксплойта нетEPSS 0 %qemu · qemu9 июл. 2018 г.
- CVE-2015-345635Наблюдать
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (o
ВысокаяCVSS 7,7Proof of conceptEPSS 15 %qemu · qemu13 мая 2015 г.
- CVE-2016-400135Наблюдать
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configu
ВысокаяCVSS 8,6Эксплойта нетEPSS 4 %qemu · qemu23 мая 2016 г.
- CVE-2017-1511935Наблюдать
The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue.
ВысокаяCVSS 8,6Эксплойта нетEPSS 3 %qemu · qemu27 июл. 2018 г.