GCVE - cpe:2.3:a:qemu:qemu:2.1.0:rc5:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qemu:qemu:2.1.0:rc5:*:*:*:*:*:*

part: a version: 2.1.0 update: rc5

Vendor	Qemu (`dc79796f-803a-5e2c-8ac2-933a08531b40`)
Product	Qemu (`741928e6-f439-57f2-bcb7-48ccc5351068`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/qemu/qemu`	purl2cpe	2026-06-01 10:18:03.828777
`pkg:gitlab/qemu-project/qemu`	purl2cpe	2026-06-01 10:18:03.828779

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-8817`	vulnerable	2026-06-08 05:07:04.969722	Details available QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS. Published: 2016-12-29T22:00:00.000Z Updated: 2024-08-06T08:29:22.024Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2016-2671.html https://bugzilla.redhat.com/show_bug.cgi?id=1300771 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3 http://rhn.redhat.com/errata/RHSA-2016-2706.html http://www.openwall.com/lists/oss-security/2016/03/01/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9718`	vulnerable	2026-06-08 05:06:12.872055	Details available The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions. Published: 2015-04-21T16:00:00.000Z Updated: 2024-08-06T13:55:04.598Z Open on db.gcve.eu Reference links http://www.debian.org/security/2015/dsa-3259 http://openwall.com/lists/oss-security/2015/04/20/7 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3251bdcf1c67427d964517053c3d185b46e618e8 http://www.securityfocus.com/bid/73316	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8106`	vulnerable	2026-06-08 05:06:07.587828	Details available Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320. Published: 2014-12-08T16:00:00.000Z Updated: 2024-08-06T13:10:50.632Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2014/12/04/8 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a http://rhn.redhat.com/errata/RHSA-2015-0795.html http://rhn.redhat.com/errata/RHSA-2015-0624.html http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3640`	vulnerable	2026-06-08 05:05:42.004188	Details available The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket. Published: 2014-11-07T19:00:00.000Z Updated: 2024-08-06T10:50:18.275Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3045 https://bugzilla.redhat.com/show_bug.cgi?id=1144818 http://rhn.redhat.com/errata/RHSA-2015-0624.html http://rhn.redhat.com/errata/RHSA-2015-0349.html http://www.debian.org/security/2014/dsa-3044	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.