Search CVE reports

141 – 150 of 396 results

Detailed view

Sort by:

CVE-2017-10664

Low priority

Some fixes available 3 of 4

qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt.

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-11434

Medium priority

Some fixes available 3 of 4

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9524

Medium priority

Some fixes available 1 of 2

The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a denial of service (segmentation fault and server crash) by leveraging failure to...

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	—	—	Not affected
qemu-kvm	—	—	—	—	Not in release

CVE-2017-10911

Medium priority

Some fixes available 18 of 29

The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of...

152 affected packages

linux, linux-allwinner, linux-allwinner-5.19, linux-aws, linux-aws-5.0...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
linux	Not affected	Not affected	Not affected	Not affected	Fixed
linux-allwinner	Not in release	Not in release	Not in release	Not in release	Not in release
linux-allwinner-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws	Not affected	Not affected	Not affected	Not affected	Fixed
linux-aws-5.0	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-aws-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-aws-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-aws-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-aws-hwe	Not in release	Not in release	Not in release	Not in release	Not affected
linux-azure	Not affected	Not affected	Not affected	Not affected	Not affected
linux-azure-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-edge	Not in release	Not in release	Not in release	Not affected	Not in release
linux-azure-fde	Not in release	Not affected	Not affected	Not in release	Not in release
linux-azure-fde-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-azure-fde-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fde-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-azure-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-bluefield	Not in release	Not in release	Not affected	Not in release	Not in release
linux-dell300x	Not in release	Not in release	Not in release	Not affected	Not in release
linux-euclid	Not in release	Not in release	Not in release	Not in release	Ignored
linux-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-flo	Not in release	Not in release	Not in release	Not in release	Ignored
linux-gcp	Not affected	Not affected	Not affected	Not affected	Fixed
linux-gcp-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gcp-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-gcp-edge	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gcp-fips	Not in release	Not in release	Not in release	Not in release	Not in release
linux-gke	Not affected	Not affected	Not affected	Not in release	Fixed
linux-gke-4.15	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gke-5.0	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gke-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gke-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gke-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-gkeop	Not affected	Not affected	Not affected	Not in release	Not in release
linux-gkeop-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-gkeop-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-goldfish	Not in release	Not in release	Not in release	Not in release	Ignored
linux-grouper	Not in release	Not in release	Not in release	Not in release	Not in release
linux-hwe	Not in release	Not in release	Not in release	Not affected	Fixed
linux-hwe-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-hwe-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-hwe-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-hwe-edge	Not in release	Not in release	Not in release	Not affected	Fixed
linux-ibm	Not affected	Not affected	Not affected	Not in release	Not in release
linux-ibm-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-ibm-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-intel	Not affected	Not in release	Not in release	Not in release	Not in release
linux-intel-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-intel-iot-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-intel-iotg	Not in release	Not affected	Not in release	Not in release	Not in release
linux-intel-iotg-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-iot	Not in release	Not in release	Not affected	Not in release	Not in release
linux-kvm	Not in release	Not affected	Not affected	Not affected	Fixed
linux-laptop	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lowlatency	Not affected	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-lowlatency-hwe-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lowlatency-hwe-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-lts-quantal	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-raring	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-saucy	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-trusty	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-utopic	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-vivid	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-wily	Not in release	Not in release	Not in release	Not in release	Not in release
linux-lts-xenial	Not in release	Not in release	Not in release	Not in release	Not in release
linux-maguro	Not in release	Not in release	Not in release	Not in release	Not in release
linux-mako	Not in release	Not in release	Not in release	Not in release	Ignored
linux-manta	Not in release	Not in release	Not in release	Not in release	Not in release
linux-nvidia	Not affected	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-nvidia-lowlatency	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem	Not in release	Not in release	Not in release	Not affected	Not affected
linux-oem-5.10	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oem-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oem-5.14	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oem-5.17	Not in release	Not affected	Not in release	Not in release	Not in release
linux-oem-5.6	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oem-6.0	Not in release	Not affected	Not in release	Not in release	Not in release
linux-oem-6.1	Not in release	Not affected	Not in release	Not in release	Not in release
linux-oem-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-oem-6.8	Not affected	Not in release	Not in release	Not in release	Not in release
linux-oem-osp1	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle	Not affected	Not affected	Not affected	Not affected	Not affected
linux-oracle-5.0	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.13	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-oracle-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-oracle-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-oracle-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-raspi	Not affected	Not affected	Not affected	Not in release	Not in release
linux-raspi-5.4	Not in release	Not in release	Not in release	Not affected	Not in release
linux-raspi-realtime	Not in release	Not in release	Not in release	Not in release	Not in release
linux-raspi2	Not in release	Not in release	Not affected	Not affected	Fixed
linux-raspi2-5.3	Not in release	Not in release	Not in release	Not affected	Not in release
linux-realtime	Not in release	Ignored	Not in release	Not in release	Not in release
linux-riscv	Not affected	Not affected	Not affected	Not in release	Not in release
linux-riscv-5.11	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-5.15	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-riscv-5.8	Not in release	Not in release	Not affected	Not in release	Not in release
linux-riscv-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-riscv-6.8	Not in release	Not affected	Not in release	Not in release	Not in release
linux-snapdragon	Not in release	Not in release	Not in release	Not affected	Fixed
linux-starfive	Not in release	Not in release	Not in release	Not in release	Not in release
linux-starfive-5.19	Not in release	Not affected	Not in release	Not in release	Not in release
linux-starfive-6.2	Not in release	Not affected	Not in release	Not in release	Not in release
linux-starfive-6.5	Not in release	Not affected	Not in release	Not in release	Not in release
linux-xilinx-zynqmp	Not in release	Not affected	Not affected	Not in release	Not in release
qemu	Not affected	Not affected	Not affected	Not affected	Fixed
qemu-kvm	Not in release	Not in release	Not in release	Not in release	Not in release
xen	Not affected	Not affected	Not affected	Not affected	Not affected

CVE-2017-9503

Low priority

Some fixes available 3 of 4

QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors...

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9375

Low priority

Some fixes available 3 of 4

QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9374

Low priority

Some fixes available 3 of 4

Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9373

Low priority

Some fixes available 3 of 4

Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9330

Low priority

Some fixes available 3 of 4

QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability...

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	Not affected	Not affected	Fixed
qemu-kvm	—	—	Not in release	Not in release	Not in release

CVE-2017-9310

Low priority

Some fixes available 1 of 2

QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service (infinite loop) via vectors related to setting the initial receive / transmit...

2 affected packages

qemu, qemu-kvm

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
qemu	—	—	—	—	Not affected
qemu-kvm	—	—	—	—	Not in release

Export to JSON

Results by page: