Known vulnerabilities in qemu-system-x86-microvm (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
qemu-system-x86-microvm (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:qemu-system-x86-microvm:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
61
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
1:6.0+dfsg-2expubuntu1
1:6.0+dfsg-2expubuntu2
1:6.0+dfsg-2expubuntu4
1:6.2+dfsg-2ubuntu3
1:6.2+dfsg-2ubuntu4
1:6.2+dfsg-2ubuntu5
1:6.2+dfsg-2ubuntu6.1
1:6.2+dfsg-2ubuntu6.3
1:6.2+dfsg-2ubuntu6.4
1:6.2+dfsg-2ubuntu6.5
1:6.2+dfsg-2ubuntu6.7
1:6.2+dfsg-2ubuntu6.8
1:6.2+dfsg-2ubuntu6.9
1:6.2+dfsg-2ubuntu6.10
1:6.2+dfsg-2ubuntu6.12
1:6.2+dfsg-2ubuntu6.13
1:6.2+dfsg-2ubuntu6.14
1:6.2+dfsg-2ubuntu6.15
1:6.2+dfsg-2ubuntu6.17
1:6.2+dfsg-2ubuntu6.18
1:6.2+dfsg-2ubuntu6.19
1:6.2+dfsg-2ubuntu6.22
1:6.2+dfsg-2ubuntu6.23
1:6.2+dfsg-2ubuntu6.25
1:6.2+dfsg-2ubuntu6.28
1:6.2+dfsg-2ubuntu6.29
1:6.2+dfsg-2ubuntu6.32
1:6.2+dfsg-2ubuntu6.30
1:6.2+dfsg-2ubuntu6.31
1:6.2+dfsg-2ubuntu6
1:6.2+dfsg-2ubuntu6.27
1:6.2+dfsg-2ubuntu6.26
1:4.2-3ubuntu6.10
1:5.0-5ubuntu9.2
1:4.2-3ubuntu6.6
1:4.2-3ubuntu6.4
1:4.2-3ubuntu6.30
1:6.2+dfsg-2ubuntu6.24
1:4.2-3ubuntu6.29
1:6.2+dfsg-2ubuntu6.21
1:4.2-3ubuntu6.28
1:6.2+dfsg-2ubuntu6.16
1:4.2-3ubuntu6.27
1:6.2+dfsg-2ubuntu6.11
1:4.2-3ubuntu6.24
1:6.2+dfsg-2ubuntu6.6
1:4.2-3ubuntu6.23
1:6.0+dfsg-2expubuntu1.3
1:6.2+dfsg-2ubuntu6.2
1:4.2-3ubuntu6.21
1:6.0+dfsg-2expubuntu1.2
1:4.2-3ubuntu6.17
1:5.0-5ubuntu9.9
1:5.2+dfsg-9ubuntu3.1
1:4.2-3ubuntu6.14
1:5.0-5ubuntu9.6
1:4.2-3ubuntu6.12
1:5.0-5ubuntu9.4
4.2-3ubuntu6
Vulnerabilities (61)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU75178 - Out-of-bounds write CVE-2022-2962 |
CWE-787 | Low | 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6 | 17.04.2023 |
SB2023041750 SB2023041751 SB2022101465 and 2 more |
||
| #VU72307 - Integer underflow CVE-2022-3165 |
CWE-191 | Medium | 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6 | 15.02.2023 |
SB2023021577 SB2023030828 SB2023041751 and 8 more |
||
| #VU69353 - Use After Free CVE-2021-3750 |
CWE-416 | High | 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6 | 15.11.2022 |
SB2022111536 SB2022111555 SB2023041751 and 12 more |
||
| #VU68551 - Use After Free CVE-2022-0216 |
CWE-416 | Medium | 1:4.2-3ubuntu6.24, 1:6.2+dfsg-2ubuntu6.6 | 20.10.2022 |
SB2022102077 SB2022102082 SB2022102091 and 12 more |
||
| #VU63778 - Release of invalid pointer or reference CVE-2021-3682 |
CWE-763 | Low | 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6 | 30.05.2022 |
SB2022022813 SB2021100524 SB2023041751 and 2 more |
||
| #VU58812 - Off-by-one Error CVE-2021-3930 |
CWE-193 | Medium | 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.24, 1:6.0+dfsg-2expubuntu1.2, 1:6.2+dfsg-2ubuntu6.6 | 09.12.2021 |
SB2021120919 SB2021120920 SB2021122221 and 7 more |
||
| #VU46318 - Integer overflow CVE-2020-12829 |
CWE-190 | Low | 1:4.2-3ubuntu6.4 | 07.09.2020 |
SB2020090714 SB2020090715 SB2020081923 |
||
| #VU46316 - Divide By Zero CVE-2020-14415 |
CWE-369 | Low | 1:4.2-3ubuntu6.4 | 07.09.2020 |
SB2020090713 SB2020081923 |
||
| #VU45985 - Out-of-bounds write CVE-2020-14364 |
CWE-787 | Medium | 1:4.2-3ubuntu6.6 | 24.08.2020 |
SB2020082410 SB2020090715 SB2020091121 and 35 more |
||
| #VU44163 - Reachable Assertion CVE-2020-16092 |
CWE-617 | Medium | 1:4.2-3ubuntu6.4 | 11.08.2020 |
SB2020081102 SB2020090715 SB2020101311 and 9 more |
||
| #VU31808 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-13800 |
CWE-835 | Medium | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020072816 SB2020111105 and 2 more |
||
| #VU31806 - Out-of-bounds write CVE-2020-13765 |
CWE-787 | Medium | 1:4.2-3ubuntu6.4, 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 24.07.2020 |
SB2020072412 SB2021020319 SB2021020411 and 5 more |
||
| #VU31805 - Reachable Assertion CVE-2020-10761 |
CWE-617 | Medium | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020072816 SB2020111105 and 1 more |
||
| #VU31804 - NULL Pointer Dereference CVE-2020-13659 |
CWE-476 | Medium | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020072816 SB2020111105 and 4 more |
||
| #VU31803 - Out-of-bounds write CVE-2020-13754 |
CWE-787 | Medium | 1:4.2-3ubuntu6.4, 1:4.2-3ubuntu6.14, 1:5.0-5ubuntu9.6 | 24.07.2020 |
SB2020072412 SB2020111105 SB2021062316 and 8 more |
||
| #VU31802 - Out-of-bounds read CVE-2020-13362 |
CWE-125 | Low | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020072816 SB2020111105 and 4 more |
||
| #VU31801 - Out-of-bounds write CVE-2020-13361 |
CWE-787 | Medium | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020072816 SB2020111105 and 4 more |
||
| #VU31799 - Stack-based buffer overflow CVE-2020-15863 |
CWE-121 | Medium | 1:4.2-3ubuntu6.4 | 24.07.2020 |
SB2020072412 SB2020090715 SB2020101311 and 1 more |
||
| #VU31746 - Out-of-bounds read CVE-2020-10756 |
CWE-125 | Medium | 1:4.2-3ubuntu6.4 | 22.07.2020 |
SB2020070930 SB2020072204 SB2020072205 and 9 more |
||
| #VU28283 - Out-of-bounds read CVE-2020-13253 |
CWE-125 | Medium | 1:4.2-3ubuntu6.4 | 27.05.2020 |
SB2020052709 SB2020111105 SB2021020226 and 5 more |
Showing elements 1 - 20 out of 61