Qemu Sårbarheter

Tidslinje

Förra året

Version

1.7.016
5.014
2.013
2.112
2.212

Åtgärd

Official Fix316
Temporary Fix0
Workaround0
Unavailable1
Not Defined90

Utnyttjbarhet

High0
Functional0
Proof-of-Concept16
Unproven54
Not Defined337

Åtkomstvektor

Not Defined0
Physical0
Local221
Adjacent85
Network101

Autentisering

Not Defined0
High54
Low205
None148

Användarinteraktion

Not Defined0
Required0
None407

C3BM Index

Förra året

CVSSv3 Base

≤10
≤20
≤32
≤436
≤585
≤6138
≤763
≤851
≤923
≤109

CVSSv3 Temp

≤10
≤20
≤32
≤438
≤5101
≤6134
≤763
≤845
≤918
≤106

VulDB

≤10
≤20
≤37
≤498
≤536
≤6156
≤735
≤837
≤927
≤1011

NVD

≤10
≤20
≤31
≤415
≤523
≤6106
≤753
≤845
≤921
≤1013

CNA

≤10
≤20
≤30
≤41
≤53
≤68
≤74
≤83
≤92
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k2
<2k46
<5k126
<10k91
<25k128
<50k14
<100k0
≥100k0

Utnyttja idag

<1k311
<2k24
<5k42
<10k19
<25k11
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

Affected Versions (144): 0.1, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.2, 0.3, 0.4, 0.4.1, 0.4.2, 0.4.3, 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5, 0.6, 0.6.1, 0.7, 0.7.1, 0.7.2, 0.8, 0.8.1, 0.8.2, 0.9, 0.9.1, 0.9.1-5, 0.10, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.11, 0.11.0-rc, 0.11.0-rc1, 0.11.0-rc2, 0.12, 0.14, 0.15, 0.15.1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.3.1, 1.4, 1.4.1, 1.4.2, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1, 1.6.2, 1.7, 1.7.1, 1:2.1+dfsg-12+deb8u6, 1:2.1+dfsg-12+deb8u12, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8+deb10u2, 1:3.1+dfsg-8~deb10u1, 1:4.1-1, 2, 2.0, 2.0.2, 2.1, 2.1+dfsg, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.12.5, 2.14, 2.14.1, 2.14.2, 3, 3.0, 3.1, 3.1.5, 4, 4.0, 4.1, 4.2, 4.2.0oa, 4.2.0ob, 4.2.0oc, 4.2.0od, 4.2.0oe, 4.2.0of, 4.2.0og, 4.2.0oh, 4.2.0oi, 4.2.0oj, 4.2.0ok, 4.2.0ol, 4.2.0om, 4.2.0on, 4.3, 4.4, 4.5, 5, 5.0, 5.1, 5.2, 6.0, 6.1, 6.1.0-rc1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 7.0, 8, 8.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.1, 8.2, 8.2.1, 14.04, 16.04, 18.04, 18.10

Link to Product Website: https://www.qemu.org/

Programvarutyp: Virtualization Software

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
10/05/20245.55.5QEMU Virtio PCI Binding virtio-pci.c vhost_net_stop privilegier eskalering$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2024-4693
10/04/20245.55.5QEMU Fragmented Packet net_tx_pkt.c update_sctp_checksum förnekande av tjänsten$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2024-3567
10/04/20247.47.4QEMU virtio-gpu/virtio-serial-bus/virtio-crypto minneskorruption$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2024-3446
09/04/20245.55.3QEMU sdhci_write_dataport minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-3447
20/02/20246.36.0QEMU pdb.c pdb_get_file_size(const svag autentisering$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-24475
20/02/20246.36.0QEMU minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-24474
19/02/20245.55.5QEMU pcie_sriov.c register_vfs Privilege Escalation$5k-$25k$5k-$25kNot DefinedNot Defined0.08CVE-2024-26328
19/02/20245.55.3QEMU pcie_sriov.c register_vfs minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-26327
12/01/20246.56.3QEMU Built-In VNC Server qemu_clipboard_request förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-6683
02/01/20245.25.2QEMU virtio-net Device virtio_net_flush_tx minneskorruption$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-6693
01/11/20236.05.9QEMU Disk Offset core.c ide_dma_cb minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-5088
11/09/20235.65.5QEMU scsi-disk.c scsi_disk_reset förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-42467
29/08/20237.07.0QEMU TCG Accelerator Local Privilege Escalation$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2020-24165
23/08/20238.28.2QEMU Rocker Device Model of_dpa_cmd_add_l2_flood förnekande av tjänsten$5k-$25k$0-$5kNot DefinedNot Defined0.06CVE-2022-36648
14/08/20234.54.4QEMU ctrl.c nvme_directive_receive förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-40360
04/08/20234.94.9QEMU informationsgivning$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-4135
03/08/20236.05.9QEMU Virtual Crypto Device virtio-crypto.c virtio_crypto_sym_op_helper minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-3180
01/08/20232.62.5QEMU Hot-Unplug tävlingsvillkor$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-3301
24/07/20233.93.9QEMU 9pfs Passthrough Filesystem Local Privilege Escalation$0-$5k$0-$5kNot DefinedNot Defined0.07CVE-2023-1386
12/07/20235.75.6QEMU e1000e e1000e_write_packet_to_guest minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-3019
04/07/20233.53.4QEMU VNC vnc-clipboard.c inflate_buffer förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-3255
03/07/20235.55.3QEMU 9pfs 9p-util.h openat_dir privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-2861
29/06/20236.46.4QEMU VNC Server förnekande av tjänsten$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2023-3354
22/04/20236.56.3Fabrice Bellard QEMU CLIENT_CUT_TEXT Message förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-5239
22/04/20237.87.6QEMU minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-4532

382 fler poster visas inte

Interested in the pricing of exploits?

See the underground prices here!