QID 198683

Qemu incorrectly handled the floppy diskemulator.
The qemu vmxnet3 nic emulator incorrectlyhandled certain values.
The qemu vhost-user gpu device contained severalsecurity issues.
Qemu incorrectly handled bulk transfers from spiceclients.
The qemu uas device emulation incorrectly handledcertain stream numbers.
The qemu virtio-net device incorrectly handledcertain buffer addresses.
The qemu scsi device emulation incorrectly handledcertain mode select commands.
The qemu acpi logic incorrectly handled certainvalues.
The qemuvirtiofsd device incorrectly handled permissions when creating files.

An attacker inside the guest could use this issue to cause qemuto crash, resulting in a denial of service.
An attacker inside the guest could use this issueto cause qemu to crash, resulting in a denial of service.
An attacker inside the guest could use these issues tocause qemu to crash, resulting in a denial of service, leak sensitiveinformation, or possibly execute arbitrary code.
A remote attacker could use this issue to cause qemu to crash,resulting in a denial of service, or possibly execute arbitrary code.
An attacker inside the guest could use this issueto cause qemu to crash, resulting in a denial of service, or possiblyexecute arbitrary code.
An attacker inside the guest could use this issueto cause qemu to crash, resulting in a denial of service, or possiblyexecute arbitrary code.
An attacker inside the guest could possiblyuse this issue to cause qemu to crash, resulting in a denial of service.
An attacker inside the guest could possibly use this issue to causeqemu to crash, resulting in a denial of service.
Anattacker inside the guest could use this issue to create files inside thedirectory shared by virtiofs with unintended permissions, possibly allowingprivilege escalation.