Known vulnerabilities in qemu-system-x86-microvm (Ubuntu package) - page 2
Vendor:
Canonical Ltd.
Software:
qemu-system-x86-microvm (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:qemu-system-x86-microvm:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
61
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
1:6.0+dfsg-2expubuntu1
1:6.0+dfsg-2expubuntu2
1:6.0+dfsg-2expubuntu4
1:6.2+dfsg-2ubuntu3
1:6.2+dfsg-2ubuntu4
1:6.2+dfsg-2ubuntu5
1:6.2+dfsg-2ubuntu6.1
1:6.2+dfsg-2ubuntu6.3
1:6.2+dfsg-2ubuntu6.4
1:6.2+dfsg-2ubuntu6.5
1:6.2+dfsg-2ubuntu6.7
1:6.2+dfsg-2ubuntu6.8
1:6.2+dfsg-2ubuntu6.9
1:6.2+dfsg-2ubuntu6.10
1:6.2+dfsg-2ubuntu6.12
1:6.2+dfsg-2ubuntu6.13
1:6.2+dfsg-2ubuntu6.14
1:6.2+dfsg-2ubuntu6.15
1:6.2+dfsg-2ubuntu6.17
1:6.2+dfsg-2ubuntu6.18
1:6.2+dfsg-2ubuntu6.19
1:6.2+dfsg-2ubuntu6.22
1:6.2+dfsg-2ubuntu6.23
1:6.2+dfsg-2ubuntu6.25
1:6.2+dfsg-2ubuntu6.28
1:6.2+dfsg-2ubuntu6.29
1:6.2+dfsg-2ubuntu6.32
1:6.2+dfsg-2ubuntu6.30
1:6.2+dfsg-2ubuntu6.31
1:6.2+dfsg-2ubuntu6
1:6.2+dfsg-2ubuntu6.27
1:6.2+dfsg-2ubuntu6.26
1:4.2-3ubuntu6.10
1:5.0-5ubuntu9.2
1:4.2-3ubuntu6.6
1:4.2-3ubuntu6.4
1:4.2-3ubuntu6.30
1:6.2+dfsg-2ubuntu6.24
1:4.2-3ubuntu6.29
1:6.2+dfsg-2ubuntu6.21
1:4.2-3ubuntu6.28
1:6.2+dfsg-2ubuntu6.16
1:4.2-3ubuntu6.27
1:6.2+dfsg-2ubuntu6.11
1:4.2-3ubuntu6.24
1:6.2+dfsg-2ubuntu6.6
1:4.2-3ubuntu6.23
1:6.0+dfsg-2expubuntu1.3
1:6.2+dfsg-2ubuntu6.2
1:4.2-3ubuntu6.21
1:6.0+dfsg-2expubuntu1.2
1:4.2-3ubuntu6.17
1:5.0-5ubuntu9.9
1:5.2+dfsg-9ubuntu3.1
1:4.2-3ubuntu6.14
1:5.0-5ubuntu9.6
1:4.2-3ubuntu6.12
1:5.0-5ubuntu9.4
4.2-3ubuntu6
Vulnerabilities (61)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU94528 - Operation on a Resource after Expiration or Release CVE-2024-4693 |
CWE-672 | Medium | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 18.07.2024 |
SB2024071839 SB20241022393 SB2024111101 and 2 more |
||
| #VU85832 - Improper input validation CVE-2020-24165 |
CWE-20 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 26.01.2024 |
SB2024012627 SB2023091571 SB2023091572 and 1 more |
||
| #VU85831 - Out-of-bounds read CVE-2023-1544 |
CWE-125 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 26.01.2024 |
SB2024012622 SB2024012627 SB2023120193 and 10 more |
||
| #VU85829 - NULL Pointer Dereference CVE-2023-40360 |
CWE-476 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 26.01.2024 |
SB2024012621 SB2024012627 SB2024060637 |
||
| #VU85734 - Use After Free CVE-2023-3019 |
CWE-416 | Low | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 23.01.2024 |
SB2024012356 SB2024012360 SB2024013061 and 12 more |
||
| #VU84979 - Out-of-bounds read CVE-2023-4135 |
CWE-125 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 04.01.2024 |
SB2024010412 SB2024012627 SB2024060637 |
||
| #VU80016 - Out-of-bounds write CVE-2023-3180 |
CWE-787 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 25.08.2023 |
SB2023082525 SB2023082526 SB2023082840 and 13 more |
||
| #VU80015 - NULL Pointer Dereference CVE-2023-3354 |
CWE-476 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 25.08.2023 |
SB2023082524 SB2023082526 SB2023082840 and 19 more |
||
| #VU78948 - Reachable Assertion CVE-2023-3301 |
CWE-617 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 04.08.2023 |
SB2023080421 SB2023080425 SB20230808136 and 11 more |
||
| #VU78946 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-3255 |
CWE-835 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 04.08.2023 |
SB2023080416 SB2023080425 SB20230808136 and 13 more |
||
| #VU78780 - Permissions, Privileges, and Access Controls CVE-2023-2861 |
CWE-264 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 31.07.2023 |
SB2023073110 SB2023073115 SB2023080425 and 13 more |
||
| #VU73788 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-14394 |
CWE-835 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 17.03.2023 |
SB2023031732 SB2023031735 SB2023032138 and 7 more |
||
| #VU72306 - Out-of-bounds write CVE-2021-3638 |
CWE-787 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 15.02.2023 |
SB2023021576 SB2021100524 SB2023010348 and 11 more |
||
| #VU69352 - Out-of-bounds write CVE-2021-3611 |
CWE-787 | Medium | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 15.11.2022 |
SB2022111536 SB2022111555 SB2021072178 and 8 more |
||
| #VU54310 - Release of invalid pointer or reference CVE-2021-3594 |
CWE-763 | Low | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 22.06.2021 |
SB2021062220 SB2021062221 SB2021072002 and 14 more |
||
| #VU54308 - Release of invalid pointer or reference CVE-2021-3592 |
CWE-763 | Low | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 22.06.2021 |
SB2021062220 SB2021062221 SB2021072002 and 15 more |
||
| #VU27389 - Use After Free CVE-2020-1983 |
CWE-416 | Medium | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 28.04.2020 |
SB2020042818 SB2020043016 SB2020050725 and 16 more |
||
| #VU27388 - Missing release of memory after effective lifetime CVE-2019-20382 |
CWE-401 | Medium | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 28.04.2020 |
SB2019090618 SB2020040749 SB2020043016 and 8 more |
||
| #VU25458 - Heap-based Buffer Overflow CVE-2020-7039 |
CWE-122 | Low | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 19.02.2020 |
SB2020021912 SB2020031117 SB2020031053 and 25 more |
||
| #VU25456 - Memory corruption CVE-2020-8608 |
CWE-119 | Low | 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24 | 19.02.2020 |
SB2020021912 SB2020033013 SB2020040146 and 24 more |
Showing elements 21 - 40 out of 61