CentOS 9 : qemu-kvm-6.2.0-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the qemu-kvm-6.2.0-7.el9 build changelog. - The inodeinitowner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group...

CVE-2024-0358

creationtimestamp| type| source ---|---|--- 2024-01-10 02:26:35+00:00| seen| https://t.me/ctinow/165502 2024-01-26 12:11:25+00:00| seen| https://t.me/ctinow/174177...

CVE-2024-0358

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

CVE-2024-0358 DeShang DSO2O install.php access control

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

CVE-2024-0358

CVE-2024-0358 affects DeShang DSO2O (up to version 4.1.0). The root cause is an improper access control flaw in an unknown section of /install/install.php, enabling a remote attacker to manipulate access without authentication. The vulnerability is remote-exploitable and has been publicly disclos...

Resource Hacker v3.6.0.92 - Buffer overflow

Exploit Title: Resource Hacker 3.6.0.92 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-06 Vendor Homepage: http://www.angusj.com/resourcehacker/ Software Link : http://www.angusj.com/resourcehacker/ Tested Version: 3.6.0.92 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...

CVE-2023-0358

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0358

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0358 Use After Free in gpac/gpac

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0358 Use After Free in gpac/gpac

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2023-0358

CVE-2023-0358 describes a use-after-free vulnerability in the GPAC multimedia framework, specifically in the GitHub repository gpac/gpac prior to version 2.3.0-DEV. The issue is rooted in improper memory handling (use-after-free) within a component/function/file referenced by multiple connected a...

CVE-2023-0358

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV...

CVE-2022-0358 affecting package qemu-kvm 4.2.0-41

CVE-2022-0358 affecting package qemu-kvm 4.2.0-41. A patched version of the package is available...

Amazon Linux 2022 : qemu, qemu-audio-alsa, qemu-audio-oss (ALAS2022-2022-050)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-050 advisory. A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution...

CVE-2022-0358

creationtimestamp| type| source ---|---|--- 2022-08-29 18:34:20+00:00| seen| https://t.me/cibsecurity/48974...

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certa...

AZL-10763 CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5

A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certa...

CVE-2022-0358

CVE-2022-0358 pertains to the QEMU virtio-fs daemon (virtiofsd) and describes a local-privilege issue tied to an existing CVE-2018-13405 scenario. A local guest user can create files in directories shared by virtio-fs that are SGID-writable and belong to a specific group, causing files to acquire...

CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5

CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5. A patched version of the package is available...

OESA-2022-1772 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in ...