QEMU (Quick Emulator) vulnerabilities
3 known CVE vulnerabilities in QEMU (Quick Emulator), translated and rated.
- CVE-2017-14167High
Integer overflow in the load_multiboot function in QEMU allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, triggering an out-of-bounds write.
- CVE-2017-5931High
Integer overflow in hw/virtio/virtio-crypto.c in QEMU allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, triggering a heap-based buffer overflow.
- CVE-2017-6058High
Buffer overflow in NetRxPkt::ehdr_buf in QEMU when the VLANSTRIP feature is enabled on the vmxnet3 device allows remote attackers to cause a denial of service via out-of-bounds access, leading to a QEMU process crash.