Search CVE reports
41 – 50 of 541 results
QEMU VNC Tight PNG channel-max truncation causes remote denial of service
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through...
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| qemu-hwe | Vulnerable | Not in release | Not in release | — | — |
[virtio-gpu: fix overflow check when allocating 2d image]
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Vulnerable | Vulnerable | Not affected | Not affected | Not affected |
| qemu-hwe | Vulnerable | Not in release | Not in release | — | — |
ui: fix validation of VNC extended clipboard data length
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
libvhost-user: fix buffer overflow in virtqueue_read_indirect_desc()
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: fix parse_hexstr
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
9pfs: fix missing rename lock in v9fs_co_readdir_many
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
ui/vnc: fix OOB read updating VNC update frequency stats
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
ui/vnc OOB writes
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit...
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |