İçeriğe atla
Noroxi

QEMU kayıtları

qemu üreticisine ait 421 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %0,2
Pre-auth RCE
29
Düzeltme kaydı olan
%97,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

421 kayıt
  • CVE-2019-12928
    60Bu hafta

    The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve

    KritikCVSS 9,8SilahlaştırılmışEPSS %23

    qemu · qemu24 Haz 2019

  • CVE-2015-8556
    44Planlayın

    Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    qemu · qemu24 Mar 2017

  • CVE-2017-15118
    43Planlayın

    A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an expor

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    qemu · qemu27 Tem 2018

  • CVE-2016-4002
    41Planlayın

    Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allow

    KritikCVSS 9,8İstismar yokEPSS %6

    qemu · qemu26 Nis 2016

  • CVE-2016-7161
    41Planlayın

    Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitr

    KritikCVSS 9,8İstismar yokEPSS %6

    qemu · qemu5 Eki 2016

  • CVE-2017-16845
    41Planlayın

    hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

    KritikCVSS 10,0İstismar yokEPSS %2

    qemu · qemu17 Kas 2017

  • CVE-2022-36648
    41Planlayın

    The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %1

    qemu · qemu22 Ağu 2023

  • CVE-2019-12929
    40Planlayın

    The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution,

    KritikCVSS 9,8İstismar yokEPSS %4

    qemu · qemu24 Haz 2019

  • CVE-2018-17963
    40Planlayın

    qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service

    KritikCVSS 9,8İstismar yokEPSS %4

    qemu · qemu9 Eki 2018

  • CVE-2016-9603
    40Planlayın

    A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur

    KritikCVSS 9,9İstismar yokEPSS %4

    qemu · qemu27 Tem 2018

  • CVE-2018-20815
    40Planlayın

    In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

    KritikCVSS 9,8İstismar yokEPSS %4

    qemu · qemu31 May 2019

  • CVE-2017-8380
    40Planlayın

    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.

    KritikCVSS 9,8İstismar yokEPSS %3

    qemu · qemu28 Ağu 2017

  • CVE-2009-3616
    40Planlayın

    Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrar

    KritikCVSS 9,9İstismar yokEPSS %3

    qemu · qemu23 Eki 2009

  • CVE-2017-2620
    40Planlayın

    Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue.

    KritikCVSS 9,9İstismar yokEPSS %3

    qemu · qemu27 Tem 2018

  • CVE-2018-12617
    38İzleyin

    qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overfl

    YüksekCVSS 7,5Kavram kanıtıEPSS %25

    qemu · qemu21 Haz 2018

  • CVE-2015-7512
    38İzleyin

    Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause

    KritikCVSS 9,0İstismar yokEPSS %7

    qemu · qemu8 Oca 2016

  • CVE-2012-6075
    38İzleyin

    Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and

    KritikCVSS 9,3İstismar yokEPSS %4

    qemu · qemu12 Şub 2013

  • CVE-2017-2615
    37İzleyin

    Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue.

    KritikCVSS 9,1İstismar yokEPSS %3

    qemu · qemu2 Tem 2018

  • CVE-2015-1779
    36İzleyin

    The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) we

    YüksekCVSS 8,6İstismar yokEPSS %6

    qemu · qemu12 Oca 2016

  • CVE-2016-9602
    36İzleyin

    Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS.

    YüksekCVSS 8,8İstismar yokEPSS %3

    qemu · qemu26 Nis 2018

  • CVE-2017-2630
    36İzleyin

    A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support.

    YüksekCVSS 8,8İstismar yokEPSS %2

    qemu · qemu27 Tem 2018

  • CVE-2017-7471
    36İzleyin

    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper acce

    KritikCVSS 9,0İstismar yokEPSS %0

    qemu · qemu9 Tem 2018

  • CVE-2015-3456
    35İzleyin

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (o

    YüksekCVSS 7,7Kavram kanıtıEPSS %15

    qemu · qemu13 May 2015

  • CVE-2016-4001
    35İzleyin

    Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configu

    YüksekCVSS 8,6İstismar yokEPSS %4

    qemu · qemu23 May 2016

  • CVE-2017-15119
    35İzleyin

    The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue.

    YüksekCVSS 8,6İstismar yokEPSS %3

    qemu · qemu27 Tem 2018