TencentOS Server 4: qemu (TSSA-2024:0869)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0869 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Oracle Linux 8 : virt:kvm_utils1 (ELSA-2024-12791)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-12791 advisory. - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 - Fix for CVE-2019-9755 heap-based buffer overflow leads to local root...

USN-6567-2: QEMU regression

USN-6567-1 fixed vulnerabilities QEMU. The fix for CVE-2023-2861 was too restrictive and introduced a behaviour change leading to a regression in certain environments. This update fixes the problem. Original advisory details: Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the...

CVE-2023-40360

creationtimestamp| type| source ---|---|--- 2023-08-15 04:08:52+00:00| seen| https://t.me/cibsecurity/68467...

BELL-CVE-2023-40360

Bulletin has no description...

CVE-2023-40360

CVE-2023-40360 affects QEMU up to version 8.0.4. It is caused by a NULL pointer dereference in nvme_directive_receive (hw/nvme/ctrl.c) due to a missing check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled. The CVSSv3.1 base score is 5.5 (ME...