kvm (SUSE:Linux Enterprise Server 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 11 SP4 package kvm, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (120)

• CVE-2016-4002 — CVSS 9.8 (critical): Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets…
• CVE-2018-17963 — CVSS 9.8 (critical): qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service…
• CVE-2016-7161 — CVSS 9.8 (critical): Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute…
• CVE-2015-7512 — CVSS 9.0 (critical): Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to…
• CVE-2017-7471 — CVSS 9.0 (critical): Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper…
• CVE-2016-1568 — CVSS 8.8 (high): Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial…
• CVE-2017-14167 — CVSS 8.8 (high): Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute…
• CVE-2016-3710 — CVSS 8.8 (high): The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to…
• CVE-2018-7550 — CVSS 8.8 (high): The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on…
• CVE-2016-4001 — CVSS 8.6 (high): Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is…
• CVE-2016-2857 — CVSS 8.4 (high): The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap…
• CVE-2018-11806 — CVSS 8.2 (high): m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
• CVE-2016-1714 — CVSS 8.1 (high): The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration…
• CVE-2016-5338 — CVSS 7.8 (high): The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of…
• CVE-2019-6778 — CVSS 7.8 (high): In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
• CVE-2017-7980 — CVSS 7.8 (high): Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute…
• CVE-2017-7493 — CVSS 7.8 (high): Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper…
• CVE-2016-5126 — CVSS 7.8 (high): Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of…
• CVE-2016-9602 — CVSS 7.6 (high): Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use…
• CVE-2017-8309 — CVSS 7.5 (high): Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by…
• CVE-2015-8619 — CVSS 7.5 (high): The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application…
• CVE-2018-17962 — CVSS 7.5 (high): Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
• CVE-2015-6855 — CVSS 7.5 (high): hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of…
• CVE-2018-12617 — CVSS 7.5 (high): qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer…
• CVE-2018-17958 — CVSS 7.5 (high): Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
• CVE-2017-10664 — CVSS 7.5 (high): qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of service (daemon crash) by…
• CVE-2015-5279 — CVSS 7.2 (high): Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial…
• CVE-2014-3689 — CVSS 7.2 (high): The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via…
• CVE-2015-5154 — CVSS 7.2 (high): Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled…
• CVE-2015-8743 — CVSS 7.1 (high): QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while…
• CVE-2016-2538 — CVSS 7.1 (high): Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators…
• CVE-2015-3214 — CVSS 6.9 (medium): The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write…
• CVE-2016-4439 — CVSS 6.7 (medium): The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer…
• CVE-2015-8504 — CVSS 6.5 (medium): Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and…
• CVE-2015-8613 — CVSS 6.5 (medium): Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows…
• CVE-2016-9907 — CVSS 6.5 (medium): Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while…
• CVE-2017-5856 — CVSS 6.5 (medium): Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to…
• CVE-2015-8345 — CVSS 6.5 (medium): The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop)…
• CVE-2016-9911 — CVSS 6.5 (medium): Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing…
• CVE-2018-10839 — CVSS 6.5 (medium): Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer…
• CVE-2016-2392 — CVSS 6.5 (medium): The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB…
• CVE-2016-2858 — CVSS 6.5 (medium): QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service…
• CVE-2016-9921 — CVSS 6.5 (medium): Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while…
• CVE-2017-8086 — CVSS 6.5 (medium): Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to…
• CVE-2015-5745 — CVSS 6.5 (medium): Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial…
• CVE-2016-4020 — CVSS 6.5 (medium): The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS…
• CVE-2017-5579 — CVSS 6.5 (medium): Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to…
• CVE-2015-5239 — CVSS 6.5 (medium): Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a…
• CVE-2017-6505 — CVSS 6.5 (medium): The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a…
• CVE-2015-5278 — CVSS 6.5 (medium): The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and…
• CVE-2016-8667 — CVSS 6.0 (medium): The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service…
• CVE-2015-7549 — CVSS 6.0 (medium): The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service…
• CVE-2016-10155 — CVSS 6.0 (medium): Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service…
• CVE-2016-2841 — CVSS 6.0 (medium): The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators…
• CVE-2016-4037 — CVSS 6.0 (medium): The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite…
• CVE-2016-4441 — CVSS 6.0 (medium): The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which…
• CVE-2016-4454 — CVSS 6.0 (medium): The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory…
• CVE-2016-5106 — CVSS 6.0 (medium): The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation…
• CVE-2016-5107 — CVSS 6.0 (medium): The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS…
• CVE-2016-7116 — CVSS 6.0 (medium): Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files…
• CVE-2016-8576 — CVSS 6.0 (medium): The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…
• CVE-2016-8577 — CVSS 6.0 (medium): Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2016-8578 — CVSS 6.0 (medium): The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a…
• CVE-2016-8669 — CVSS 6.0 (medium): The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a…
• CVE-2016-8909 — CVSS 6.0 (medium): The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…
• CVE-2016-8910 — CVSS 6.0 (medium): The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2016-9101 — CVSS 6.0 (medium): Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory…
• CVE-2016-9102 — CVSS 6.0 (medium): Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a…
• CVE-2016-9103 — CVSS 6.0 (medium): The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host…
• CVE-2016-9105 — CVSS 6.0 (medium): Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2016-9106 — CVSS 6.0 (medium): Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2017-15289 — CVSS 6.0 (medium): The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service…
• CVE-2018-5683 — CVSS 6.0 (medium): The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process…
• CVE-2017-9330 — CVSS 5.6 (medium): QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of…
• CVE-2017-15038 — CVSS 5.6 (medium): Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive…
• CVE-2017-5715 — CVSS 5.6 (medium): Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of…
• CVE-2016-9776 — CVSS 5.5 (medium): QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It…
• CVE-2016-9922 — CVSS 5.5 (medium): The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest…
• CVE-2017-10806 — CVSS 5.5 (medium): Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service…
• CVE-2017-5898 — CVSS 5.5 (medium): Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID…
• CVE-2017-5973 — CVSS 5.5 (medium): The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of…
• CVE-2016-5337 — CVSS 5.5 (medium): The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory…
• CVE-2017-7718 — CVSS 5.5 (medium): hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds…
• CVE-2016-3712 — CVSS 5.5 (medium): Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process…
• CVE-2017-9373 — CVSS 5.5 (medium): Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a…
• CVE-2017-9375 — CVSS 5.5 (medium): QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial…
• CVE-2017-9503 — CVSS 5.5 (medium): QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users…
• CVE-2016-2198 — CVSS 5.5 (medium): QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when…
• CVE-2016-1981 — CVSS 5.5 (medium): QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while…
• CVE-2016-1922 — CVSS 5.5 (medium): QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference…
• CVE-2018-15746 — CVSS 5.5 (medium): qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp…
• CVE-2015-8558 — CVSS 5.5 (medium): The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop…
• CVE-2018-18438 — CVSS 5.5 (medium): Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value.
• CVE-2018-18849 — CVSS 5.5 (medium): In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
• CVE-2018-19364 — CVSS 5.5 (medium): hw/9pfs/cofile.c and hw/9pfs/9p.c in QEMU can modify an fid path while it is being accessed by a second thread, leading to (for example) a…
• CVE-2018-3639 — CVSS 5.5 (medium): Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior…
• CVE-2016-9603 — CVSS 5.5 (medium): A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could…
• CVE-2017-11434 — CVSS 5.5 (medium): The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service…
• CVE-2017-13672 — CVSS 5.5 (medium): QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of…
• CVE-2017-2615 — CVSS 5.5 (medium): Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur…
• CVE-2017-2620 — CVSS 5.5 (medium): Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The…
• CVE-2016-5403 — CVSS 5.5 (medium): The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory…
• CVE-2017-2633 — CVSS 5.4 (medium): An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while…
• CVE-2014-7815 — CVSS 5.0 (medium): The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel…
• CVE-2016-2391 — CVSS 5.0 (medium): The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a…
• CVE-2015-7295 — CVSS 5.0 (medium): hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported…
• CVE-2014-9718 — CVSS 4.9 (medium): The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's…
• CVE-2018-19489 — CVSS 4.7 (medium): v9fs_wstat in hw/9pfs/9p.c in QEMU allows guest OS users to cause a denial of service (crash) because of a race condition during file…
• CVE-2016-7909 — CVSS 4.4 (medium): The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…
• CVE-2016-5105 — CVSS 4.4 (medium): The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support…
• CVE-2016-4453 — CVSS 4.4 (medium): The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite…
• CVE-2016-7170 — CVSS 4.4 (medium): The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2016-7908 — CVSS 4.4 (medium): The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when…
• CVE-2017-18030 — CVSS 4.4 (medium): The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of…
• CVE-2016-6490 — CVSS 4.4 (medium): The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial…
• CVE-2016-5238 — CVSS 4.4 (medium): The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write…
• CVE-2017-11334 — CVSS 4.4 (medium): The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial…
• CVE-2016-9104 — CVSS 4.4 (medium): Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow…
• CVE-2015-6815 — CVSS 3.5 (low): The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a…
• CVE-2014-3615 — CVSS 2.1 (low): The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.