GCVE - cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qemu:qemu:2.8.0:rc2:*:*:*:*:*:*

part: a version: 2.8.0 update: rc2

Vendor	Qemu (`dc79796f-803a-5e2c-8ac2-933a08531b40`)
Product	Qemu (`741928e6-f439-57f2-bcb7-48ccc5351068`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/qemu/qemu`	purl2cpe	2026-06-01 10:18:03.885014
`pkg:gitlab/qemu-project/qemu`	purl2cpe	2026-06-01 10:18:03.885015

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9922`	vulnerable	2026-06-08 05:08:24.977299	Details available The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values. Published: 2017-03-27T15:00:00.000Z Updated: 2024-08-06T03:07:30.938Z Open on db.gcve.eu Reference links https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://access.redhat.com/errata/RHSA-2017:2392 http://www.securityfocus.com/bid/94803 https://bugzilla.redhat.com/show_bug.cgi?id=1334398	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9921`	vulnerable	2026-06-08 05:08:24.976663	Details available Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS. Published: 2016-12-23T22:00:00.000Z Updated: 2024-08-06T03:07:31.373Z Open on db.gcve.eu Reference links https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://access.redhat.com/errata/RHSA-2017:2392 https://security.gentoo.org/glsa/201701-49 http://www.securityfocus.com/bid/94803 https://access.redhat.com/errata/RHSA-2017:2408	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9846`	vulnerable	2026-06-08 05:08:24.626034	Details available QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host. Published: 2016-12-29T22:00:00.000Z Updated: 2024-08-06T02:59:03.577Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/12/05/23 http://www.openwall.com/lists/oss-security/2016/12/05/18 https://security.gentoo.org/glsa/201701-49 https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg00029.html http://www.securityfocus.com/bid/94765	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9845`	vulnerable	2026-06-08 05:08:24.625587	Details available QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes. Published: 2016-12-29T22:00:00.000Z Updated: 2024-08-06T02:59:03.575Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/12/05/22 https://lists.nongnu.org/archive/html/qemu-devel/2016-11/msg00019.html https://security.gentoo.org/glsa/201701-49 http://www.securityfocus.com/bid/94763 http://www.openwall.com/lists/oss-security/2016/12/05/15	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9776`	vulnerable	2026-06-08 05:08:24.490271	Details available QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS. Published: 2016-12-29T22:00:00.000Z Updated: 2024-08-06T02:59:03.469Z Open on db.gcve.eu Reference links https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://security.gentoo.org/glsa/201701-49 http://www.openwall.com/lists/oss-security/2016/12/02/3 http://www.openwall.com/lists/oss-security/2016/12/02/8 https://bugzilla.redhat.com/show_bug.cgi?id=1400829	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.