CVE-2017-5578

Qemu: display: virtio-gpu: host memory leakage in virtio_gpu_resource_attach_backing

Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2017-5579

Qemu: serial: host memory leakage 16550A UART emulation

Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu Redhat

Products

Debian Linux Qemu Enterprise Linux and 1 more

CVE-2015-8567

Qemu: net: vmxnet3: host memory leakage

Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1 · 7.7 High EPSS 5.6% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 7 more

CVE-2017-5856

Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2017-11755

ImageMagick: Memory leak in WritePICONImage function via mishandled AcquireSemaphoreInfo call

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an AcquireSemaphoreInfo call.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2015-8568

Qemu: net: vmxnet3: host memory leakage

Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2017-5857

Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref

Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2017-5552

Qemu: display: virtio-gpu-3d: memory leakage in virgl_resource_attach_backing

Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2017-9936

libtiff: memory leak in tif_jbig.c

In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 7.5% KEV · Not listed

Vendors

Canonical Debian Libtiff

Products

Ubuntu Linux Debian Linux Libtiff

CVE-2017-11751

ImageMagick: Memory leak in WritePICONImage function

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2016-10155

Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb

Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS 3.1 · 6.0 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu Redhat

Products

Debian Linux Qemu Enterprise Linux and 1 more

CVE-2017-11724

ImageMagick: Memory leaks in ReadMATImage function involving the quantum_info and clone_info data structures

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2017-9404

libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Canonical Debian Libtiff

Products

Ubuntu Linux Debian Linux Libtiff

CVE-2017-9403

libtiff: Memory leak in TIFFReadDirEntryLong8Array

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Canonical Debian Libtiff

Products

Ubuntu Linux Debian Linux Libtiff

CVE-2017-9060

Qemu: virtio-gpu: host memory leakage in Virtio GPU device

Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (memory consumption) via a large number of "VIRTIO_GPU_CMD_SET_SCANOUT:" commands.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2017-11752

ImageMagick: Memory leak in ReadMAGICKImage function

The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Imagemagick

Products

Imagemagick

CVE-2017-5525

Qemu: audio: memory leakage in ac97 device

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2017-5526

Qemu: audio: memory leakage in es1370 device

Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu

Products

Debian Linux Qemu

CVE-2015-7701

ntp: slow memory leak in CRYPTO_ASSOC

Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption).

CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed

Vendors

Debian Netapp Ntp and 2 more

Products

Debian Linux Clustered Data Ontap Data Ontap and 11 more

CVE-2017-9373

Qemu: ide: ahci host memory leakage during hotunplug

Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Qemu Redhat

Products

Debian Linux Qemu Enterprise Linux and 1 more