Kvm Qumranet Kvm vulnerabilities
4 vulnerabilities
Known vulnerabilities in Kvm Qumranet Kvm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2010-0419kvm_qumranet · kvmkvm_qumranet kvmThe x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.CVSS4.4MediumEPSS0.35%RoutineCVE-2010-0306kvm_qumranet · kvmkvm_qumranet kvmThe x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298.CVSS4.1MediumEPSS0.38%RoutineCVE-2008-4539canonical · ubuntu_linux +4 morecanonical ubuntu_linuxHeap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX "bitblt" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.CVSS7.2HighEPSS0.54%RoutineCVE-2008-2382kvm_qumranet · kvm +2 morekvm_qumranet kvmThe protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.CVSS5.0MediumEPSS6.62%