| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-15124 | 7.8 |
VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VN
|
12-02-2023 - 23:28 | 09-01-2018 - 21:29 | |
| CVE-2017-13672 | 2.1 |
QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
|
10-11-2020 - 18:41 | 01-09-2017 - 13:29 | |
| CVE-2017-13711 | 5.0 |
Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
|
29-10-2020 - 17:24 | 01-09-2017 - 13:29 | |
| CVE-2018-5683 | 2.1 |
The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
|
14-05-2020 - 14:14 | 23-01-2018 - 18:29 | |
| CVE-2017-15268 | 5.0 |
Qemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data-channel read operations, related to io/channel-websock.c.
|
03-10-2019 - 00:03 | 12-10-2017 - 15:29 |