Search CVE reports
1 – 10 of 512 results
OOB access in virtio-gpu blob resource creation
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
QEMU 9pfs Readonly O_TRUNC/O_APPEND Bypass via 9P2000.u Flag Mismatch
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
virtio: fix queue size validation against allocated maximum
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
virtio: Malformed packed descriptor livelocks the device at 100% host CPU (guest triggered DoS)
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64_t but read by the VMS_VBUFFER load path as a signed int32_t. On little-endian hosts, a...
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| qemu-hwe | Vulnerable | Not in release | Not in release | — | — |
[hw/9pfs: cap Treaddir allocation]
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
[hw/9pfs: add xattr FID limit to prevent memory exhaustion]
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
QEMU USB Redirect Infinite Loop / Divide-by-Zero via max_packet_size=0
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
VNC lossy refresh dirty bitmap OOB write at 2160p
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
QEMU xHCI Interrupter Register OOB Access (Non-Default Configuration)
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |