The QEMU Project vulnerabilities
4 vulnerabilities
Known vulnerabilities in The QEMU Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2RoutineCVE-2020-10702the qemu project · qemu +3 morethe qemu project qemuA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.CVSS5.5MediumEPSS0.33%RoutineCVE-2020-10717the qemu project · qemu +2 morethe qemu project qemuA potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest via virtio-fs device. If the guest opens the maximum number of file descriptors under the shared directory, a denial of service may occur. This flaw allows a guest user/process to cause this denial of service on the host.CVSS6.5MediumEPSS0.40%RoutineCVE-2019-3812the qemu project · qemu +6 morethe qemu project qemuQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.CVSS5.5MediumEPSS0.43%RoutineCVE-2018-10839the qemu project · qemu-kvm +5 morethe qemu project qemu-kvmQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.CVSS6.5MediumEPSS3.08%