QEMU 3.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*
part: a version: 3.0.0 update: *
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.885052 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.885053 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9824 |
vulnerable | 2026-06-08 05:14:26.269413 |
Details available
tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.
Published: 2019-06-03T20:50:39.000Z
Updated: 2024-08-04T22:01:54.730Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6778 |
vulnerable | 2026-06-08 05:14:13.092458 |
Details available
In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
Published: 2019-03-17T18:00:46.000Z
Updated: 2024-08-04T20:31:04.394Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12247 |
vulnerable | 2026-06-08 05:12:38.717538 |
Details available
QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environment variables. NOTE: This has been disputed as not exploitable
Published: 2019-05-22T14:22:54.000Z
Updated: 2024-08-04T23:17:39.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18849 |
vulnerable | 2026-06-08 05:11:14.818322 |
Details available
In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
Published: 2019-03-17T19:56:41.000Z
Updated: 2024-08-05T11:23:08.494Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.