Qemu: VNC: memory corruption due to unchecked resolution limit

An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for RHEV 3.X Hypervisor and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Qemu: VNC: memory corruption due to unchecked resolution limit

An out-of-bounds memory access issue was found in Quick Emulator QEMU in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vncrefreshserversurface'. A user inside a guest could use this flaw to crash the QEMU process...

PT-2017-10531

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where user-provided input can trigger an access to a pointer that has not...

CVE-2017-0346: Improper Input Validation

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the size of an input buffer is not validated, leading to denial of service or potential escalation of privileges...

CVE-2017-0355: Improper Input Validation

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service...

CVE-2017-0347: Improper Validation of Array Index

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potenti...

PT-2017-10539

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a pointer passed from a user to the driver is not correctly validat...

CVE-2017-0351

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

CVE-2017-0344: Undefined Security Weakness

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape may allow users to gain access to arbitrary physical memory, leading to escalation of privileges...

PT-2017-10541

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a NULL pointer dereference caused by invalid user input in the kernel mode layer handler, which may lead to denial of service or potential escalation...

PT-2017-10540

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler of the NVIDIA GPU Display Driver. A value passed from a user to the driver is not correctly validate...

PT-2017-10542

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to incorrect access control in the GPU firmware, which may allow CPU access to sensitive GPU control registers. This could lead to an escalation of...

CVE-2017-0350

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...

CVE-2017-0348: NULL Pointer Dereference

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges...

PT-2017-10538

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a NULL pointer dereference in the kernel mode layer handler of the nvlddmkm.sys driver, which may lead to denial of service or potential...

PT-2017-10545

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where it may access paged memory while holding a spinlock, leading to a...

CVE-2017-0349: NULL Pointer Dereference

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service ...

PT-2017-10533

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a lack of synchronization in two functions within the kernel mode layer nvlddmkm.sys of the NVIDIA Windows GPU Display Driver, which can lead...

PT-2017-10534

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, which may allow users to gain access to arbitrary physical memory. This...