Total vulnerabilities in the database
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
| Software | From | Fixed in |
|---|---|---|
| qemu / qemu | - | 2.3.1.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 7.0 | 7.0.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 20 | 20.x |
| fedoraproject / fedora | 21 | 21.x |
| suse / linux_enterprise_server | 11-sp1 | 11-sp1.x |
| suse / linux_enterprise_desktop | 11-sp3 | 11-sp3.x |
| suse / linux_enterprise_software_development_kit | 11-sp3 | 11-sp3.x |
| suse / linux_enterprise_server | 11-sp2 | 11-sp2.x |
| suse / linux_enterprise_server | 12 | 12.x |
| suse / linux_enterprise_software_development_kit | 12 | 12.x |
| suse / linux_enterprise_desktop | 12 | 12.x |
| suse / linux_enterprise_server | 11-sp3 | 11-sp3.x |
| citrix / xenserver | 6.0.2 | 6.0.2.x |
| citrix / xenserver | 6.0 | 6.0.x |
| citrix / xenserver | 6.1.0 | 6.1.0.x |
| citrix / xenserver | 6.5 | 6.5.x |
| citrix / xenserver | 6.2.0 | 6.2.0.x |
| canonical / ubuntu_linux | 14.10 | 14.10.x |
| canonical / ubuntu_linux | 15.04 | 15.04.x |
| canonical / ubuntu_linux | 12.04 | 12.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |