Known vulnerabilities in qemu-system-x86-microvm (Ubuntu package) - page 3
Vendor:
Canonical Ltd.
Software:
qemu-system-x86-microvm (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:qemu-system-x86-microvm:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
61
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
1:6.0+dfsg-2expubuntu1
1:6.0+dfsg-2expubuntu2
1:6.0+dfsg-2expubuntu4
1:6.2+dfsg-2ubuntu3
1:6.2+dfsg-2ubuntu4
1:6.2+dfsg-2ubuntu5
1:6.2+dfsg-2ubuntu6.1
1:6.2+dfsg-2ubuntu6.3
1:6.2+dfsg-2ubuntu6.4
1:6.2+dfsg-2ubuntu6.5
1:6.2+dfsg-2ubuntu6.7
1:6.2+dfsg-2ubuntu6.8
1:6.2+dfsg-2ubuntu6.9
1:6.2+dfsg-2ubuntu6.10
1:6.2+dfsg-2ubuntu6.12
1:6.2+dfsg-2ubuntu6.13
1:6.2+dfsg-2ubuntu6.14
1:6.2+dfsg-2ubuntu6.15
1:6.2+dfsg-2ubuntu6.17
1:6.2+dfsg-2ubuntu6.18
1:6.2+dfsg-2ubuntu6.19
1:6.2+dfsg-2ubuntu6.22
1:6.2+dfsg-2ubuntu6.23
1:6.2+dfsg-2ubuntu6.25
1:6.2+dfsg-2ubuntu6.28
1:6.2+dfsg-2ubuntu6.29
1:6.2+dfsg-2ubuntu6.32
1:6.2+dfsg-2ubuntu6.30
1:6.2+dfsg-2ubuntu6.31
1:6.2+dfsg-2ubuntu6
1:6.2+dfsg-2ubuntu6.27
1:6.2+dfsg-2ubuntu6.26
1:4.2-3ubuntu6.10
1:5.0-5ubuntu9.2
1:4.2-3ubuntu6.6
1:4.2-3ubuntu6.4
1:4.2-3ubuntu6.30
1:6.2+dfsg-2ubuntu6.24
1:4.2-3ubuntu6.29
1:6.2+dfsg-2ubuntu6.21
1:4.2-3ubuntu6.28
1:6.2+dfsg-2ubuntu6.16
1:4.2-3ubuntu6.27
1:6.2+dfsg-2ubuntu6.11
1:4.2-3ubuntu6.24
1:6.2+dfsg-2ubuntu6.6
1:4.2-3ubuntu6.23
1:6.0+dfsg-2expubuntu1.3
1:6.2+dfsg-2ubuntu6.2
1:4.2-3ubuntu6.21
1:6.0+dfsg-2expubuntu1.2
1:4.2-3ubuntu6.17
1:5.0-5ubuntu9.9
1:5.2+dfsg-9ubuntu3.1
1:4.2-3ubuntu6.14
1:5.0-5ubuntu9.6
1:4.2-3ubuntu6.12
1:5.0-5ubuntu9.4
4.2-3ubuntu6
Vulnerabilities (61)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85828 - Divide By Zero CVE-2023-42467 |
CWE-369 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 26.01.2024 |
SB2024012620 SB2024012627 SB2024043004 and 4 more |
||
| #VU85827 - Improper Synchronization CVE-2023-5088 |
CWE-662 | Low | 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21 | 26.01.2024 |
SB2024012618 SB2024012627 SB2024043004 and 5 more |
||
| #VU77499 - Out-of-bounds write CVE-2023-0330 |
CWE-787 | Low | 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11 | 19.06.2023 |
SB2023061903 SB2023061909 SB2023063036 and 14 more |
||
| #VU72308 - Use After Free CVE-2022-1050 |
CWE-416 | High | 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11 | 15.02.2023 |
SB2023021578 SB2023030828 SB2023031735 and 8 more |
||
| #VU72299 - Integer overflow CVE-2022-4172 |
CWE-190 | Medium | 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11 | 15.02.2023 |
SB2023021573 SB2023021574 SB2023050972 and 6 more |
||
| #VU71136 - Out-of-bounds read CVE-2022-4144 |
CWE-125 | Medium | 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11 | 12.01.2023 |
SB2023011233 SB2023011254 SB20230118102 and 12 more |
||
| #VU64570 - Use After Free CVE-2021-3929 |
CWE-416 | Medium | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 21.06.2022 |
SB2022062122 SB2022062124 SB2023031735 and 6 more |
||
| #VU64569 - Heap-based Buffer Overflow CVE-2021-3507 |
CWE-122 | Medium | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 21.06.2022 |
SB2021050640 SB2022062124 SB2022102676 and 9 more |
||
| #VU63788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-4207 |
CWE-362 | Low | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 30.05.2022 |
SB2022061333 SB2022062124 SB2022070437 and 9 more |
||
| #VU63787 - Integer overflow CVE-2021-4206 |
CWE-190 | Low | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 30.05.2022 |
SB2022061333 SB2022062124 SB2022070437 and 9 more |
||
| #VU63786 - Improper Resource Shutdown or Release CVE-2022-26354 |
CWE-404 | Low | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 30.05.2022 |
SB2022061333 SB2022062124 SB2022070437 and 10 more |
||
| #VU63783 - Use After Free CVE-2022-26353 |
CWE-416 | Low | 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 30.05.2022 |
SB2022061333 SB2022062124 SB2022070445 and 6 more |
||
| #VU63779 - Out-of-bounds write CVE-2021-3713 |
CWE-787 | Medium | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 30.05.2022 |
SB2021102622 SB2021110322 SB2021110323 and 4 more |
||
| #VU63776 - Integer overflow CVE-2021-20203 |
CWE-190 | Low | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 30.05.2022 |
SB2022022813 SB2021040759 |
||
| #VU63775 - NULL Pointer Dereference CVE-2021-20196 |
CWE-476 | Low | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 30.05.2022 |
SB2022022813 SB2022012539 SB2022012780 and 3 more |
||
| #VU61492 - Incorrect Default Permissions CVE-2022-0358 |
CWE-276 | Low | 1:4.2-3ubuntu6.21, 1:4.2-3ubuntu6.23, 1:6.0+dfsg-2expubuntu1.2, 1:6.0+dfsg-2expubuntu1.3, 1:6.2+dfsg-2ubuntu6.2 | 21.03.2022 |
SB2022032112 SB2022032120 SB2022032121 and 13 more |
||
| #VU58813 - Use After Free CVE-2021-3748 |
CWE-416 | High | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 09.12.2021 |
SB2021120921 SB2021120922 SB2021102622 and 9 more |
||
| #VU53681 - Out-of-bounds write CVE-2021-3546 |
CWE-787 | Medium | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 31.05.2021 |
SB2021053119 SB2021063043 SB2021063044 and 3 more |
||
| #VU53680 - Exposure of sensitive information to an unauthorized actor CVE-2021-3545 |
CWE-200 | Low | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 31.05.2021 |
SB2021053119 SB2021063043 SB2021063044 and 3 more |
||
| #VU53679 - Missing release of memory after effective lifetime CVE-2021-3544 |
CWE-401 | Medium | 1:4.2-3ubuntu6.21, 1:6.0+dfsg-2expubuntu1.2 | 31.05.2021 |
SB2021053119 SB2021063043 SB2021063044 and 3 more |
Showing elements 41 - 60 out of 61