Search CVE reports
181 – 190 of 507 results
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged...
6 affected packages
kvm, qemu, qemu-kvm, xen-3.1, xen-3.2, xen-3.3
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| kvm | — | — | — | — | — |
| qemu | — | — | — | — | — |
| qemu-kvm | — | — | — | — | — |
| xen-3.1 | — | — | — | — | — |
| xen-3.2 | — | — | — | — | — |
| xen-3.3 | — | — | — | — | — |
In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Fixed | Fixed |
| qemu-kvm | — | — | — | Not in release | Not in release |
Some fixes available 18 of 153
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
20 affected packages
basilisk2, bochs, fs-uae, ns3, slirp...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| basilisk2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| bochs | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| fs-uae | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| ns3 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| slirp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| vde2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| virtualbox | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| android | Not in release | Not in release | Not in release | Not in release | Not in release |
| libslirp | Not affected | Not affected | Not affected | Not affected | Not in release |
| qemu | Fixed | Fixed | Fixed | Fixed | Fixed |
| qemu-kvm | Not in release | Not in release | Not in release | Not in release | Not in release |
| qemu-kvm-spice | Not in release | Not in release | Not in release | Not in release | Not in release |
| qemu-linaro | Not in release | Not in release | Not in release | Not in release | Not in release |
| redboot-imx | Not in release | Not in release | Not in release | Not in release | Needs evaluation |
| slirp4netns | Not affected | Not affected | Not affected | Not affected | Not in release |
| virtualbox-hwe | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| virtualbox-lts-vivid | Not in release | Not in release | Not in release | Not in release | Not in release |
| virtualbox-lts-wily | Not in release | Not in release | Not in release | Not in release | Not in release |
| virtualbox-lts-xenial | Not in release | Not in release | Not in release | Not in release | Not in release |
| xen | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 18 of 105
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
13 affected packages
basilisk2, bochs, fs-uae, slirp, vde2...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| basilisk2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| bochs | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| fs-uae | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| slirp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| vde2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| android | Not in release | Not in release | Not in release | Not in release | Not in release |
| libslirp | Not affected | Not affected | Not affected | Not affected | Not in release |
| qemu | Fixed | Fixed | Fixed | Fixed | Fixed |
| qemu-kvm | Not in release | Not in release | Not in release | Not in release | Not in release |
| qemu-kvm-spice | Not in release | Not in release | Not in release | Not in release | Not in release |
| qemu-linaro | Not in release | Not in release | Not in release | Not in release | Not in release |
| slirp4netns | Not affected | Not affected | Not affected | Not affected | Not in release |
| xen | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 5 of 6
qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | — | Fixed |
| qemu-kvm | — | — | — | — | Not in release |
The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection, which allows the attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | — | Ignored |
| qemu-kvm | — | — | — | — | Not in release |
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP...
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | — | Ignored |
| qemu-kvm | — | — | — | — | Not in release |
Some fixes available 8 of 9
interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | Fixed | Fixed |
| qemu-kvm | — | — | — | Not in release | Not in release |
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
2 affected packages
qemu, qemu-kvm
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | — | — | — | — | Ignored |
| qemu-kvm | — | — | — | — | Not in release |
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a...
163 affected packages
intel-microcode, libvirt, linux, linux-allwinner, linux-allwinner-5.19...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| intel-microcode | — | Not affected | Not affected | Not affected | Fixed |
| libvirt | — | Fixed | Fixed | Fixed | Fixed |
| linux | — | Not affected | Not affected | Not affected | Fixed |
| linux-allwinner | — | Not in release | Not in release | Not in release | Not in release |
| linux-allwinner-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws | — | Not affected | Not affected | Not affected | Fixed |
| linux-aws-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-aws-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-aws-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-aws-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-aws-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-aws-hwe | — | Not in release | Not in release | Not in release | Not in release |
| linux-azure | — | Not affected | Not affected | Not affected | Fixed |
| linux-azure-4.15 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-azure-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-azure-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-azure-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-edge | — | Not in release | Not in release | Not in release | Fixed |
| linux-azure-fde | — | Not affected | Not affected | Not affected | Not in release |
| linux-azure-fde-5.15 | — | Not in release | Not in release | Ignored | Not in release |
| linux-azure-fde-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-fde-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-azure-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-azure-nvidia | — | Not affected | Not in release | Not in release | Not in release |
| linux-bluefield | — | Not in release | Not in release | Not affected | Not in release |
| linux-dell300x | — | Not in release | Not in release | Not in release | Not affected |
| linux-euclid | — | Not in release | Not in release | Not in release | Not in release |
| linux-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-flo | — | Not in release | Not in release | Not in release | Not in release |
| linux-gcp | — | Not affected | Not affected | Not affected | Fixed |
| linux-gcp-4.15 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gcp-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gcp-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-gcp-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-gcp-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-gcp-edge | — | Not in release | Not in release | Not in release | Fixed |
| linux-gcp-fips | — | Not in release | Not affected | Not affected | Not affected |
| linux-gke | — | Not affected | Not affected | Not affected | Not in release |
| linux-gke-4.15 | — | Not in release | Not in release | Not in release | Fixed |
| linux-gke-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gke-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gke-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gke-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-gkeop | — | Not affected | Not affected | Not affected | Not in release |
| linux-gkeop-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-gkeop-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-goldfish | — | Not in release | Not in release | Not in release | Not in release |
| linux-hwe | — | Not in release | Not in release | Not in release | Fixed |
| linux-hwe-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-hwe-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-hwe-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-hwe-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-hwe-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-hwe-edge | — | Not in release | Not in release | Not in release | Not affected |
| linux-ibm | — | Not affected | Not affected | Not affected | Not in release |
| linux-ibm-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-ibm-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-ibm-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel | — | Not affected | Not in release | Not in release | Not in release |
| linux-intel-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-intel-iot-realtime | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg | — | Not in release | Not affected | Not in release | Not in release |
| linux-intel-iotg-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-iot | — | Not in release | Not in release | Not affected | Not in release |
| linux-kvm | — | Not in release | Not affected | Not affected | Fixed |
| linux-laptop | — | Not in release | Not in release | Not in release | Not in release |
| linux-lowlatency | — | Not affected | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-lowlatency-hwe-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.11 | — | Ignored | Not in release | Not in release | Not in release |
| linux-lowlatency-hwe-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lowlatency-hwe-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-lts-trusty | — | Not in release | Not in release | Not in release | Not in release |
| linux-lts-xenial | — | Not in release | Not in release | Not in release | Not in release |
| linux-mako | — | Not in release | Not in release | Not in release | Not in release |
| linux-nvidia | — | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-6.11 | — | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-nvidia-lowlatency | — | Not affected | Not in release | Not in release | Not in release |
| linux-nvidia-tegra | — | Not affected | Not affected | Not in release | Not in release |
| linux-nvidia-tegra-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-nvidia-tegra-igx | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem | — | Not in release | Not in release | Not in release | Fixed |
| linux-oem-5.10 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.14 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-5.17 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-5.6 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oem-6.0 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.1 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.11 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oem-6.8 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oem-osp1 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle | — | Not affected | Not affected | Not affected | Fixed |
| linux-oracle-5.0 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.13 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-oracle-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-oracle-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-oracle-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-oracle-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-raspi | — | Not affected | Not affected | Not affected | Not in release |
| linux-raspi-5.4 | — | Not in release | Not in release | Not in release | Not affected |
| linux-raspi-realtime | — | Not affected | Not in release | Not in release | Not in release |
| linux-raspi2 | — | Not in release | Not in release | Not affected | Fixed |
| linux-raspi2-5.3 | — | Not in release | Not in release | Not in release | Not affected |
| linux-realtime | — | Not affected | Not affected | Not in release | Not in release |
| linux-realtime-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-realtime-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv | — | Not affected | Not affected | Not affected | Not in release |
| linux-riscv-5.11 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-5.15 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv-5.8 | — | Not in release | Not in release | Not affected | Not in release |
| linux-riscv-6.14 | — | Not affected | Not in release | Not in release | Not in release |
| linux-riscv-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-riscv-6.8 | — | Not in release | Not affected | Not in release | Not in release |
| linux-snapdragon | — | Not in release | Not in release | Not in release | Fixed |
| linux-starfive | — | Not in release | Not in release | Not in release | Not in release |
| linux-starfive-5.19 | — | Not in release | Not affected | Not in release | Not in release |
| linux-starfive-6.2 | — | Not in release | Not affected | Not in release | Not in release |
| linux-starfive-6.5 | — | Not in release | Not affected | Not in release | Not in release |
| linux-xilinx-zynqmp | — | Not in release | Not affected | Not affected | Not in release |
| qemu | — | Fixed | Fixed | Fixed | Fixed |
| qemu-kvm | — | Not in release | Not in release | Not in release | Not in release |