Lucene search
+L

5460 matches found

NVD
NVD
added 2020/12/04 7:15 a.m.32 views

CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS6AI score0.00654EPSS
SaveExploits1References4
OSV
OSV
added 2020/12/04 7:15 a.m.4 views

DEBIAN-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/04 7:15 a.m.8 views

UBUNTU-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS7AI score0.00654EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2020/12/04 7:15 a.m.43 views

CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS7AI score0.00654EPSS
SaveExploits1References4
Prion
Prion
added 2020/12/04 7:15 a.m.34 views

Null pointer dereference

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

2.1CVSS5.5AI score0.00654EPSS
SaveExploits1References4Affected Software2
CVE
CVE
added 2020/12/04 6:22 a.m.365 views

CVE-2020-28916

CVE-2020-28916 affects QEMU 5.0.0 with an infinite loop in the e1000e core when an RX descriptor has a NULL buffer address (hw/net/e1000e_core.c). Impact: denial of service on the host/guest, with potential for code execution under some advisories. Remediation: upgrade to upstream 5.2.0 or newer;...

5.5CVSS5.9AI score0.00654EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2020/12/04 6:22 a.m.38 views

CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

6.1AI score0.00654EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
added 2020/12/04 6:22 a.m.57 views

CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS6.3AI score0.00654EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2020/12/04 6:22 a.m.47 views

CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS6.9AI score0.00654EPSS
SaveExploits1
OSV
OSV
added 2020/12/03 5:15 p.m.6 views

ALPINE-CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

8.8CVSS6.5AI score0.00416EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/03 5:15 p.m.43 views

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

8.8CVSS2AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2020/12/03 5:15 p.m.39 views

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

8.8CVSS7.1AI score0.00416EPSS
SaveExploits0References2
Prion
Prion
added 2020/12/03 5:15 p.m.35 views

Design/Logic Flaw

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

7.2CVSS8.1AI score0.00416EPSS
SaveExploits0References3Affected Software2
AlpineLinux
AlpineLinux
added 2020/12/03 12:0 a.m.62 views

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

8.8CVSS8.3AI score0.00416EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/12/03 12:0 a.m.40 views

CVE-2020-14339

A flaw was found in libvirt, where it leaked a file descriptor for /dev/mapper/control into the QEMU process. This file descriptor allows for privileged operations to happen against the device-mapper on the host. This flaw allows a malicious guest user or process to perform operations outside of...

8.8CVSS8.3AI score0.00416EPSS
SaveExploits0
CVE
CVE
added 2020/12/03 12:0 a.m.330 views

CVE-2020-14339

CVE-2020-14339 describes a flaw in libvirt where a file descriptor for /dev/mapper/control is leaked into the QEMU process. This enables privileged operations against the host device-mapper, allowing a malicious guest user or process to perform actions outside normal permissions and potentially d...

8.8CVSS8.1AI score0.00416EPSS
SaveExploits0References3Affected Software2
Talos
Talos
added 2020/12/02 12:0 a.m.122 views

EIP Stack Group OpENer ethernet/IP server denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the Ethernet/IP server functionality of the EIP Stack Group OpENer 2.3 and development commit 8c73bf3. A large number of network requests in a small span of time can cause the running program to stop. An attacker can send a sequence of requests ...

7.5CVSS7.7AI score0.02063EPSS
SaveExploits1
CNNVD
CNNVD
added 2020/12/01 12:0 a.m.8 views

QEMU 安全漏洞

QEMU is a suite of analog processor software. A security vulnerability exists in QEMU. An attacker could exploit this vulnerability to trigger a denial of service on a host system by triggering an overload via QEMU's e1000e null packet descriptor...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References14
OSV
OSV
added 2020/11/20 6:9 p.m.7 views

SUSE-SU-2020:3474-1 Security update for u-boot

This update for u-boot fixes the following issues: Work around CVE-2019-11059 by disabling 64Bit descritptor size bsc1134853 CVE-2019-11690 bsc1134157, CVE-2020-10648 bsc1167209, CVE-2019-13103 bsc1143463, CVE-2019-14197 bsc1143821, CVE-2019-14200 bsc1143825, CVE-2019-14201 bsc1143827,...

9.8CVSS7.6AI score0.027EPSS
SaveExploits1References35
RedhatCVE
RedhatCVE
added 2020/11/18 10:27 p.m.50 views

CVE-2020-28912

With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between...

7.3CVSS2.5AI score0.02487EPSS
SaveExploits0References3
Rows per page
Query Builder