QEMU 2.6.0 Release Candidate 0
Approved changes feed: RSS · Atom
cpe:2.3:a:qemu:qemu:2.6.0:rc0:*:*:*:*:*:*
part: a version: 2.6.0 update: rc0
| Vendor | Qemu (dc79796f-803a-5e2c-8ac2-933a08531b40) |
|---|---|
| Product | Qemu (741928e6-f439-57f2-bcb7-48ccc5351068) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/qemu/qemu |
purl2cpe | 2026-06-01 10:18:03.884955 |
pkg:gitlab/qemu-project/qemu |
purl2cpe | 2026-06-01 10:18:03.884957 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-4037 |
vulnerable | 2026-06-08 05:07:46.462929 |
Details available
The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.
Published: 2016-05-23T19:00:00.000Z
Updated: 2024-08-06T00:17:30.084Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4001 |
vulnerable | 2026-06-08 05:07:46.390598 |
Details available
Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.
Published: 2016-05-23T19:00:00.000Z
Updated: 2024-08-06T00:17:29.996Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3712 |
vulnerable | 2026-06-08 05:07:45.853220 |
Details available
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
Published: 2016-05-11T21:00:00.000Z
Updated: 2024-08-06T00:03:34.421Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3710 |
vulnerable | 2026-06-08 05:07:45.844111 |
Details available
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Published: 2016-05-11T21:00:00.000Z
Updated: 2024-08-06T00:03:34.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2198 |
vulnerable | 2026-06-08 05:07:33.604741 |
Details available
QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
Published: 2016-12-29T22:00:00.000Z
Updated: 2024-08-05T23:24:48.274Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.