Approved changes feed: RSS · Atom

cpe:2.3:a:qemu:qemu:2.5.0:rc1:*:*:*:*:*:*

part: a version: 2.5.0 update: rc1

VendorQemu (dc79796f-803a-5e2c-8ac2-933a08531b40)
ProductQemu (741928e6-f439-57f2-bcb7-48ccc5351068)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/qemu/qemu purl2cpe 2026-06-01 10:18:03.884933
pkg:gitlab/qemu-project/qemu purl2cpe 2026-06-01 10:18:03.884934

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8504 vulnerable 2026-06-08 05:07:04.121051 Details available
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.
Published: 2017-04-11T19:00:00.000Z
Updated: 2024-08-06T08:20:42.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8345 vulnerable 2026-06-08 05:07:03.644913 Details available
The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.
Published: 2017-04-13T17:00:00.000Z
Updated: 2024-08-06T08:13:32.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7512 vulnerable 2026-06-08 05:07:01.211293 Details available
Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.
Published: 2016-01-08T21:00:00.000Z
Updated: 2024-08-06T07:51:28.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7504 vulnerable 2026-06-08 05:07:01.199892 Details available
Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.
Published: 2017-10-16T20:00:00.000Z
Updated: 2024-08-06T07:51:28.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.