CVE-2019-12247
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
Published Updated
PatchFirst · Latest vulnerabilities
qemu vulnerabilities · Page 5
Vulnerabilities published for qemu in the last 30 days: 7. Listed in the KEV catalogue: 0.
Vulnerabilities: 83
CVE-2019-8934
hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
Published UpdatedCVE-2018-19665
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.