qemu (SUSE:Linux Enterprise Module for Server Applications 15 SP3) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Server Applications 15 SP3 package qemu, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (38)
CVE-2022-35414 — CVSS 8.8 (high): softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex…
CVE-2021-3682 — CVSS 8.5 (high): A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a…
CVE-2021-3546 — CVSS 8.2 (high): An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including…
CVE-2021-4207 — CVSS 8.2 (high): A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and…
CVE-2021-4206 — CVSS 8.2 (high): A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation…
CVE-2022-0358 — CVSS 7.8 (high): A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to…
CVE-2021-3748 — CVSS 7.5 (high): A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non…
CVE-2021-3713 — CVSS 7.4 (high): An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device…
CVE-2020-35506 — CVSS 6.7 (medium): A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the…
CVE-2021-3544 — CVSS 6.5 (medium): Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They…
CVE-2021-3611 — CVSS 6.5 (medium): A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash…
CVE-2021-20196 — CVSS 6.5 (medium): A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport…
CVE-2021-3582 — CVSS 6.5 (medium): A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR"…
CVE-2021-3545 — CVSS 6.5 (medium): An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and…
CVE-2021-3930 — CVSS 6.5 (medium): An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in…
CVE-2020-17380 — CVSS 6.3 (medium): A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi…
CVE-2021-3608 — CVSS 6.0 (medium): A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling…
CVE-2020-35503 — CVSS 6.0 (medium): A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0…
CVE-2020-35504 — CVSS 6.0 (medium): A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged…
CVE-2021-3416 — CVSS 6.0 (medium): A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The…
CVE-2020-27821 — CVSS 6.0 (medium): A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an…
CVE-2021-3607 — CVSS 6.0 (medium): An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs…
CVE-2021-3409 — CVSS 5.7 (medium): The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access…
CVE-2020-8608 — CVSS 5.6 (medium): In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
CVE-2021-20255 — CVSS 5.5 (medium): A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while…
CVE-2021-3527 — CVSS 5.5 (medium): A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to…
CVE-2020-14364 — CVSS 5.0 (medium): An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while…
CVE-2020-25085 — CVSS 5.0 (medium): QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the…
CVE-2022-0216 — CVSS 4.4 (medium): A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing…
CVE-2020-35505 — CVSS 4.4 (medium): A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue…
CVE-2020-29129 — CVSS 4.3 (medium): ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the…
CVE-2020-29130 — CVSS 4.3 (medium): slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the…
CVE-2021-20263 — CVSS 3.3 (low): A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the…
CVE-2020-25723 — CVSS 3.2 (low): A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing…
CVE-2022-26354 — CVSS 3.2 (low): A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing…
CVE-2021-3419: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE-2020-25707: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-2891