CVE-2022-4172

An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table ERST device of QEMU in the readerstrecord and writeerstrecord functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could...

CVE-2022-4172

CVE-2022-4172 affects QEMU's ACPI ERST (Error Record Serialization Table) implementation. The read_erst_record() and write_erst_record() paths are vulnerable to integer overflow and buffer overflow, which may allow a malicious guest to overrun the host buffer allocated for the ERST memory device....

PT-2022-7593

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description An integer overflow and buffer overflow issue were found in the ACPI Error Record Serialization Table ERST device of QEMU in the read erst record and write erst record functions. These issues ma...

virt:kvm_utils security update

qemu-kvm 4.2.1.16.el8 - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 - migration: Tally pre-copy, downtime and post-copy bytes independently David Edmondson - migration: Introduce ramtransferredadd David Edmondson - ACPI ERST: specification for ERST support Eric...

qemu security update

15:4.2.1-16.el7 - Document CVE-2021-4145 as fixed Mark Kanda Orabug: 33791496 CVE-2021-4145 - migration: Tally pre-copy, downtime and post-copy bytes independently David Edmondson - migration: Introduce ramtransferredadd David Edmondson - ACPI ERST: specification for ERST support Eric DeVolder -...