Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (2)
qemu fixed
· 182726ab
Moritz Muehlenhoff
authored
Apr 12, 2018
182726ab
Merge branch 'master' of salsa.debian.org:security-tracker-team/security-tracker
· 165ad983
Moritz Muehlenhoff
authored
Apr 12, 2018
165ad983
Show whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
165ad983
...
...
@@ -5142,7 +5142,7 @@ CVE-2018-7860
CVE-2018-7859
RESERVED
CVE-2018-7858 (Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA ...)
- qemu
<unfixed>
(bug #892497)
- qemu
1:2.12~rc3+dfsg-1
(bug #892497)
[stretch] - qemu <not-affected> (Vulnerable code not present)
[jessie] - qemu <not-affected> (Vulnerable code not present)
[wheezy] - qemu <not-affected> (Vulnerable code not present)
...
...
@@ -6090,7 +6090,7 @@ CVE-2018-7551 (There is an invalid free in MiniPS::delete0 in minips.cpp that le
[jessie] - sam2p <no-dsa> (Will be fixed via point release)
NOTE: https://github.com/pts/sam2p/issues/28
CVE-2018-7550 (The load_multiboot function in hw/i386/multiboot.c in Quick Emulator ...)
- qemu
<unfixed>
(bug #892041)
- qemu
1:2.12~rc3+dfsg-1
(bug #892041)
- qemu-kvm <removed>
NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2018-03/msg01885.html
CVE-2018-7549 (In params.c in zsh through 5.4.2, there is a crash during a copy of an ...)
...
...
@@ -11796,7 +11796,7 @@ CVE-2018-5684 (In Libav through 12.2, there is an invalid memcpy call in the ...
[jessie] - libav <ignored> (Minor issue)
NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1110
CVE-2018-5683 (The vga_draw_text function in Qemu allows local OS guest privileged ...)
- qemu
<unfixed>
(bug #887392)
- qemu
1:2.12~rc3+dfsg-1
(bug #887392)
[stretch] - qemu <postponed> (Minor issue, can be fixed along in future DSA)
[jessie] - qemu <postponed> (Minor issue, can be fixed along in future DSA)
[wheezy] - qemu <postponed> (Minor issue, can be fixed along in next DLA)
...
...
@@ -27971,7 +27971,7 @@ CVE-2017-16847 (Zoho ManageEngine Applications Manager 13 allows SQL injection v
CVE-2017-16846 (Zoho ManageEngine Applications Manager 13 allows SQL injection via the ...)
NOT-FOR-US: Zoho ManageEngine Applications Manager
CVE-2017-16845 (hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values ...)
- qemu
<unfixed>
(bug #882136)
- qemu
1:2.12~rc3+dfsg-1
(bug #882136)
[stretch] - qemu <no-dsa> (Minor issue)
[jessie] - qemu <no-dsa> (Minor issue)
[wheezy] - qemu <postponed> (Can be fixed along in a future update)
...
...
@@ -32942,7 +32942,7 @@ CVE-2017-15125
RESERVED
NOT-FOR-US: Red Hat CloudForms
CVE-2017-15124 (VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older ...)
- qemu
<unfixed>
(bug #884806)
- qemu
1:2.12~rc3+dfsg-1
(bug #884806)
[stretch] - qemu <postponed> (Can be fixed along in later update)
[jessie] - qemu <postponed> (Can be fixed along in later update)
[wheezy] - qemu <postponed> (Can be fixed along in later update)