Known vulnerabilities in qemu-system-x86 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:qemu-system-x86_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu-system-x86 (Ubuntu package) qemu-system-x86 (Ubuntu package) is affected by 63 known vulnerabilities: 3 high, 31 medium, 29 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101964 - Resource Management Errors
CVE-2024-26328
CWE-399 Medium
No
No
1:8.2.2+ds-0ubuntu1.2 27.12.2024 SB2024122757
SB2024122903
SB2025021859
and 2 more
#VU100251 - Memory corruption
CVE-2024-26327
CWE-119 Low
No
No
1:8.2.2+ds-0ubuntu1.2 12.11.2024 SB2024111273
SB2024111275
SB2024122903
and 3 more
#VU94528 - Operation on a Resource after Expiration or Release
CVE-2024-4693
CWE-672 Medium
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 18.07.2024 SB2024071839
SB20241022393
SB2024111101
and 2 more
#VU85831 - Out-of-bounds read
CVE-2023-1544
CWE-125 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 26.01.2024 SB2024012622
SB2024012627
SB2023120193
and 10 more
#VU85829 - NULL Pointer Dereference
CVE-2023-40360
CWE-476 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 26.01.2024 SB2024012621
SB2024012627
SB2024060637
#VU85828 - Divide By Zero
CVE-2023-42467
CWE-369 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 26.01.2024 SB2024012620
SB2024012627
SB2024043004
and 4 more
#VU85827 - Improper Synchronization
CVE-2023-5088
CWE-662 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 26.01.2024 SB2024012618
SB2024012627
SB2024043004
and 5 more
#VU85734 - Use After Free
CVE-2023-3019
CWE-416 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 23.01.2024 SB2024012356
SB2024012360
SB2024013061
and 12 more
#VU84979 - Out-of-bounds read
CVE-2023-4135
CWE-125 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 04.01.2024 SB2024010412
SB2024012627
SB2024060637
#VU80016 - Out-of-bounds write
CVE-2023-3180
CWE-787 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 25.08.2023 SB2023082525
SB2023082526
SB2023082840
and 13 more
#VU80015 - NULL Pointer Dereference
CVE-2023-3354
CWE-476 Medium
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 25.08.2023 SB2023082524
SB2023082526
SB2023082840
and 19 more
#VU78948 - Reachable Assertion
CVE-2023-3301
CWE-617 Medium
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 04.08.2023 SB2023080421
SB2023080425
SB20230808136
and 11 more
#VU78946 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-3255
CWE-835 Medium
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 04.08.2023 SB2023080416
SB2023080425
SB20230808136
and 13 more
#VU78780 - Permissions, Privileges, and Access Controls
CVE-2023-2861
CWE-264 Low
No
No
1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2 31.07.2023 SB2023073110
SB2023073115
SB2023080425
and 13 more
#VU54310 - Release of invalid pointer or reference
CVE-2021-3594
CWE-763 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 22.06.2021 SB2021062220
SB2021062221
SB2021072002
and 14 more
#VU54308 - Release of invalid pointer or reference
CVE-2021-3592
CWE-763 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 22.06.2021 SB2021062220
SB2021062221
SB2021072002
and 15 more
#VU27389 - Use After Free
CVE-2020-1983
CWE-416 Medium
Available
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 28.04.2020 SB2020042818
SB2020043016
SB2020050725
and 16 more
#VU27388 - Missing release of memory after effective lifetime
CVE-2019-20382
CWE-401 Medium
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 28.04.2020 SB2019090618
SB2020040749
SB2020043016
and 8 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039
CWE-122 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25456 - Memory corruption
CVE-2020-8608
CWE-119 Low
No
No
Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.30, 1:6.2+dfsg-2ubuntu6.24, 1:8.2.2+ds-0ubuntu1.4, 1:9.0.2+ds-4ubuntu5.1 19.02.2020 SB2020021912
SB2020033013
SB2020040146
and 24 more


Showing elements 1 - 20 out of 63