Vulnerabilities in The QEMU Project
4 resultsVexday analysis
O QEMU Project apresenta 4 vulnerabilidades registradas na base, nenhuma delas sob exploração ativa conhecida e sem críticas de severidade máxima. A fraqueza dominante é improper restriction of operations within bounds of memory buffer (CWE-119), padrão em software de virtualização; nenhuma vulnerabilidade foi publicada nos últimos 90 dias, indicando um panorama de risco estável e sem eventos recentes.
CVE-2018-10839MEDIUMQemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflowEPSS 3.2%CVE-2019-3812MEDIUMQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_EPSS 0.4%CVE-2020-10717LOWA potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs EPSS 0.4%CVE-2020-10702MEDIUMA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in EPSS 0.3%