Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2011-2512

qemu-kvm: OOB memory access caused by negative vq notifies

The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison.

CVSS 2.0 · 5.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Kvm Group Redhat
Products
Qemu-kvm Enterprise Linux
CVE-2012-0029

qemu: e1000: process_tx_desc legacy mode packets heap overflow

Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.

CVSS 2.0 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Kvm Group Redhat
Products
Qemu-kvm Enterprise Linux Rhel Virtualization