Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware.

  - CVE-2015-7295     Jason Wang of Red Hat Inc. discovered that the Virtual     Network Device support is vulnerable to     denial-of-service (via resource exhaustion), that could     occur when receiving large packets.

  - CVE-2015-7504     Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360     Inc. discovered that the PC-Net II ethernet controller     is vulnerable to a heap-based buffer overflow that could     result in denial-of-service (via application crash) or     arbitrary code execution.

  - CVE-2015-7512     Ling Liu of Qihoo 360 Inc. and Jason Wang of Red Hat     Inc. discovered that the PC-Net II ethernet controller     is vulnerable to a buffer overflow that could result in     denial-of-service (via application crash) or arbitrary     code execution.

  - CVE-2015-8345     Qinghao Tang of Qihoo 360 Inc. discovered that the     eepro100 emulator contains a flaw that could lead to an     infinite loop when processing Command Blocks, eventually     resulting in denial-of-service (via application crash).

  - CVE-2015-8504     Lian Yihan of Qihoo 360 Inc. discovered that the VNC     display driver support is vulnerable to an arithmetic     exception flaw that could lead to denial-of-service (via     application crash).

  - CVE-2015-8558     Qinghao Tang of Qihoo 360 Inc. discovered that the USB     EHCI emulation support contains a flaw that could lead     to an infinite loop during communication between the     host controller and a device driver. This could lead to     denial-of-service (via resource exhaustion).

  - CVE-2015-8743     Ling Liu of Qihoo 360 Inc. discovered that the NE2000     emulator is vulnerable to an out-of-bound read/write     access issue, potentially resulting in information leak     or memory corruption.

  - CVE-2016-1568     Qinghao Tang of Qihoo 360 Inc. discovered that the IDE     AHCI emulation support is vulnerable to a use-after-free     issue, that could lead to denial-of-service (via     application crash) or arbitrary code execution.

  - CVE-2016-1714     Donghai Zhu of Alibaba discovered that the Firmware     Configuration emulation support is vulnerable to an     out-of-bound read/write access issue, that could lead to     denial-of-service (via application crash) or arbitrary     code execution.

  - CVE-2016-1922     Ling Liu of Qihoo 360 Inc. discovered that 32-bit     Windows guests support is vulnerable to a NULL pointer     dereference issue, that could lead to denial-of-service     (via application crash).

Several vulnerabilities were discovered in qemu, a full virtualization solution on x86 hardware.

  - CVE-2015-7295     Jason Wang of Red Hat Inc. discovered that the Virtual     Network Device support is vulnerable to     denial-of-service, that could occur when receiving large     packets.

  - CVE-2015-7504     Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360     Inc. discovered that the PC-Net II ethernet controller     is vulnerable to a heap-based buffer overflow that could     result in denial-of-service (via application crash) or     arbitrary code execution.

  - CVE-2015-7512     Ling Liu of Qihoo 360 Inc. and Jason Wang of Red Hat     Inc. discovered that the PC-Net II ethernet controller     is vulnerable to a buffer overflow that could result in     denial-of-service (via application crash) or arbitrary     code execution.

  - CVE-2015-7549     Qinghao Tang of Qihoo 360 Inc. and Ling Liu of Qihoo 360     Inc. discovered that the PCI MSI-X emulator is     vulnerable to a NULL pointer dereference issue, that     could lead to denial-of-service (via application crash).

  - CVE-2015-8345     Qinghao Tang of Qihoo 360 Inc. discovered that the     eepro100 emulator contains a flaw that could lead to an     infinite loop when processing Command Blocks, eventually     resulting in denial-of-service (via application crash).

  - CVE-2015-8504     Lian Yihan of Qihoo 360 Inc. discovered that the VNC     display driver support is vulnerable to an arithmetic     exception flaw that could lead to denial-of-service (via     application crash).

  - CVE-2015-8550     Felix Wilhelm of ERNW Research discovered that the PV     backend drivers are vulnerable to double fetch     vulnerabilities, possibly resulting in arbitrary code     execution.

  - CVE-2015-8558     Qinghao Tang of Qihoo 360 Inc. discovered that the USB     EHCI emulation support contains a flaw that could lead     to an infinite loop during communication between the     host controller and a device driver. This could lead to     denial-of-service (via resource exhaustion).

  - CVE-2015-8567 CVE-2015-8568     Qinghao Tang of Qihoo 360 Inc. discovered that the     vmxnet3 device emulator could be used to intentionally     leak host memory, thus resulting in denial-of-service.

  - CVE-2015-8613     Qinghao Tang of Qihoo 360 Inc. discovered that the SCSI     MegaRAID SAS HBA emulation support is vulnerable to a     stack-based buffer overflow issue, that could lead to     denial-of-service (via application crash).

  - CVE-2015-8619     Ling Liu of Qihoo 360 Inc. discovered that the Human     Monitor Interface support is vulnerable to an     out-of-bound write access issue that could result in     denial-of-service (via application crash).

  - CVE-2015-8743     Ling Liu of Qihoo 360 Inc. discovered that the NE2000     emulator is vulnerable to an out-of-bound read/write     access issue, potentially resulting in information leak     or memory corruption.

  - CVE-2015-8744     The vmxnet3 driver incorrectly processes small packets,     which could result in denial-of-service (via application     crash).

  - CVE-2015-8745     The vmxnet3 driver incorrectly processes Interrupt Mask     Registers, which could result in denial-of-service (via     application crash).

  - CVE-2016-1568     Qinghao Tang of Qihoo 360 Inc. discovered that the IDE     AHCI emulation support is vulnerable to a use-after-free     issue, that could lead to denial-of-service (via     application crash) or arbitrary code execution.

  - CVE-2016-1714     Donghai Zhu of Alibaba discovered that the Firmware     Configuration emulation support is vulnerable to an     out-of-bound read/write access issue, that could lead to     denial-of-service (via application crash) or arbitrary     code execution.

  - CVE-2016-1922     Ling Liu of Qihoo 360 Inc. discovered that 32-bit     Windows guests support is vulnerable to a NULL pointer     dereference issue, that could lead to denial-of-service     (via application crash).

  - CVE-2016-1981     The e1000 driver is vulnerable to an infinite loop issue     that could lead to denial-of-service (via application     crash).

- vnc: avoid floating point exceptions (bz #1289541, bz     #1289542)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
88628	Debian DSA-3469-1 : qemu - security update	Nessus	Debian Local Security Checks	2016/2/9	2021/1/11	critical
88630	Debian DSA-3471-1 : qemu - security update	Nessus	Debian Local Security Checks	2016/2/9	2021/1/11	critical
89377	Fedora 22 : qemu-2.3.1-9.fc22 (2015-b406a8e4f2)	Nessus	Fedora Local Security Checks	2016/3/4	2021/1/11	medium

检测

插件搜索

critical

critical

medium