TThe QEMU Project

Products

Exploited and recent CVEs

• CVE-2020-10702 Medium 5.5 A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation 0.3%
• CVE-2020-10717 Low 3.3 A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest 0.4%