p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de qemu · Página 4

Vulnerabilidades publicadas para qemu en los últimos 30 días: 14. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 507

  1. CVE-2026-48914

    Media · CVSS 6.7EPSS 0,16%Corrección disponible

    Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

    A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

    qemuSistemas operativos
    • Actualiza a 1:11.0.2+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  14. CVE-2026-2243

    Media · CVSS 5.1EPSS 0,13%Corrección disponible

    Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

    A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of service condition (DoS).

    qemuSistemas operativos
    • Actualiza a 1:10.2.2+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  15. CVE-2026-0665

    Media · CVSS 6.5EPSS 0,17%Corrección disponible

    Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq

    An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall interface, leading to a denial of service or potential memory corruption.

    qemuSistemas operativos
    • Actualiza a 1:10.2.0+ds-2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  16. CVE-2025-8860

    Baja · CVSS 3.3EPSS 0,17%Corrección disponible

    Qemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callback

    A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFI_VARS_REG_BUFFER_SIZE, the .write callback `uefi_vars_write` is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. When the guest later reads from register UEFI_VARS_REG_PIO_BUFFER_TRANSFER, the .read callback `uefi_vars_read` returns leftover metadata or other sensitive process memory from the previously allocated buffer, leading to an information disclosure vulnerability.

    qemuSistemas operativos
    • Actualiza a 1:10.0.3+ds-4
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  17. CVE-2025-14876

    Media · CVSS 5.5EPSS 0,15%Corrección disponible

    Qemu-kvm: unbounded allocation in virtio-crypto

    A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.

    qemuSistemas operativos
    • Actualiza a 1:10.2.1+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  18. CVE-2025-12464

    Media · CVSS 6.2EPSS 0,18%Corrección disponible

    Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

    A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This could lead to a buffer overrun in the e1000_receive_iov() function via the loopback code path. A malicious guest user could use this vulnerability to crash the QEMU process on the host, resulting in a denial of service.

    qemuSistemas operativos
    • Actualiza a 1:10.1.3+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2025-11234

    Alta · CVSS 7.5EPSS 0,86%Corrección disponible

    Qemu-kvm: vnc websocket handshake use-after-free

    A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.

    qemuSistemas operativos
    • Actualiza a 1:10.1.3+ds-1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →