QEMU 4.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:4.2.0:*:*:*:*:*:*:*
part: a version: 4.2.0 update: *
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.885156 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.885157 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7211 |
vulnerable | 2026-06-08 05:27:12.606044 |
Details available
tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.
Published: 2020-01-21T16:12:33.000Z
Updated: 2024-08-04T09:25:48.470Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7039 |
vulnerable | 2026-06-08 05:27:11.792379 |
Details available
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.
Published: 2020-01-16T22:51:40.000Z
Updated: 2024-08-04T09:18:02.717Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15859 |
vulnerable | 2026-06-08 05:19:27.054785 |
Details available
QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.
Published: 2020-07-21T15:25:03.000Z
Updated: 2024-08-04T13:30:22.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13800 |
vulnerable | 2026-06-08 05:18:01.106952 |
Details available
ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
Published: 2020-06-04T15:23:08.000Z
Updated: 2024-08-04T12:25:16.567Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13659 |
vulnerable | 2026-06-08 05:18:00.987742 |
Details available
address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.
Published: 2020-06-02T12:50:44.000Z
Updated: 2024-08-04T12:25:16.410Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11102 |
vulnerable | 2026-06-08 05:16:36.452689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.