FreeBSD VuXML

Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Security issues that affect the FreeBSD operating system or applications in the FreeBSD Ports Collection are documented using the Vulnerabilities and Exposures Markup Language (VuXML). The current VuXML document that serves as the source for the content of this site can be found:

in the FreeBSD Ports Collection repository, path ports/security/vuxml/vuln.xml
as a local copy
as a local copy, compressed with bzip2
as a local copy, compressed with xz
as a local copy, compressed with zstandard

Please report security issues to the FreeBSD Security Team at <ports-secteam@FreeBSD.org>. Full contact details, including information handling policies and PGP key, can be found on the FreeBSD Security page.

qemu-devel

qemu-devel at FreshPorts.org

Entered	Topic
2016-12-04	qemu -- denial of service vulnerability
2016-01-03	qemu -- denial of service vulnerabilities in eepro100 NIC support
	qemu -- denial of service vulnerability in Human Monitor Interface support
	qemu -- denial of service vulnerability in MegaRAID SAS HBA emulation
	qemu -- denial of service vulnerability in MSI-X support
	qemu -- denial of service vulnerability in Q35 chipset emulation
	qemu -- denial of service vulnerability in Rocker switch emulation
	qemu -- denial of service vulnerability in USB EHCI emulation support
	qemu -- denial of service vulnerability in VMWARE VMXNET3 NIC support
	qemu -- denial of service vulnerability in VNC
	qemu and xen-tools -- denial of service vulnerabilities in AMD PC-Net II NIC support
2016-01-02	qemu -- denial of service vulnerabilities in NE2000 NIC support
	qemu -- denial of service vulnerability in e1000 NIC support
	qemu -- denial of service vulnerability in IDE disk/CD/DVD-ROM emulation
	qemu -- denial of service vulnerability in virtio-net support
	qemu -- denial of service vulnerability in VNC
2016-01-01	qemu -- buffer overflow vulnerability in virtio-serial message exchanges
	qemu -- buffer overflow vulnerability in VNC
	qemu -- code execution on host machine
	qemu -- stack buffer overflow while parsing SCSI commands
2015-08-17	qemu, xen-tools -- QEMU leak of uninitialized heap memory in rtl8139 device model
2015-08-17	qemu, xen-tools -- use-after-free in QEMU/Xen block unplug protocol
2015-08-04	qemu, xen-tools -- QEMU heap overflow flaw with certain ATAPI commands
2015-06-26	qemu -- Heap overflow in QEMU PCNET controller, allowing guest to host escape (CVE-2015-3209)
2015-05-17	qemu, xen and VirtualBox OSE -- possible VM escape and code execution ("VENOM")
2008-11-02	qemu -- Heap overflow in Cirrus emulation
2008-05-08	qemu -- "drive_init()" Disk Format Security Bypass
2008-03-11	qemu -- unchecked block read/write vulnerability
2007-12-12	qemu -- Translation Block Local Denial of Service Vulnerability
2007-05-01	qemu -- several vulnerabilities