Zutty: Arbitrary Code Execution

Background Zutty is an X terminal emulator rendering through OpenGL ES Compute Shaders. Description Zutty does not correctly handle invalid DECRQSS commands, which can be exploited to run arbitrary commands in the terminal. Impact Untrusted text written to the Zutty terminal can achieve arbitrary...

Kitty Code Execution Vulnerability

kitty is a fast, feature-rich, GPU-based terminal emulator developed by kovidgoyal. A code execution vulnerability exists in versions prior to Kitty 0.26.2 that stems from insufficient validation in the desktop notification escape sequence and can be exploited by an attacker to cause execution of...

PT-2022-7294 · Qemu +9 · Qemu +9

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to an integer underflow in the QEMU VNC server when processing ClientCutText messages in the extended format. This can be exploited by a malicious client sending a special...

hw/usb/hcd-dwc2.c Heap Buffer Overflow DoS

The vulnerability of the dwc2handlepacket function in the hw/usb/hcd-dwc2.c component of the QEMU hardware emulation software is related to the lack of checks for division by zero. Exploiting this vulnerability allows a perpetrator to cause a system failure...

QEMU vmxnet3 DoS

The vulnerability of the vmxnet3 network card emulator, a component of the QEMU hardware emulation software, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause a system failure...

QEMU Loop Exit Condition DoS

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

Zutty 安全漏洞

Zutty is an X terminal rendering emulator via OpenGL ES Compute Shaders by Tom Szilagyi, a solo developer. A security vulnerability exists in Zutty versions prior to 0.13, which stems from a DECRQSS write terminal in text to enable arbitrary code execution...

QEMU ioport hardware emulation Pointer Swapping DoS

The vulnerability of the ioport hardware emulation software under QEMU is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

QEMU Integer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a system failure...

QEMU SCSI emulator Host Shell Adapter Buffer Overflow DoS

The vulnerability of the am53c974 host shell adapter in the SCSI emulator and hardware support provided by QEMU relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

virtio-fs hardware emulation driver QEMU

The vulnerability of the QEMU virtual machine emulation software for hardware devices, specifically virtio-fs, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

Debian dla-3099 : qemu - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3099 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3099-1 [email protected]...

QEMU 安全漏洞

QEMU Quick Emulator is a set of emulated processor software from Fabrice Bellard, a French personal developer. QEMU has a denial of service vulnerability, which stems from a deadlock problem in its AHCI controller during a software reset ahciresetport while processing host-to-device registration...

QEMU 资源管理错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a security vulnerability that originates from the fact that an attacker on a client system can force the reuse of a freed...

Mintty 注入漏洞

mintty is an application software Cygwin terminal emulator, also available for MSYS and Msys2. A security vulnerability exists in Mintty versions prior to 3.6.3. An attacker can exploit this vulnerability to execute code...

xterm: Multiple Vulnerabilities

Background xterm is a terminal emulator for the X Window system. Description Multiple vulnerabilities have been discovered in xterm. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

Intel HAXM 安全漏洞

Intel HAXM Intel Hardware Accelerated Execution Manager is a cross-platform hardware-assisted virtualization engine hypervisor from Intel Corporation that is widely used as a gas pedal for Android Emulator and QEMU. A security vulnerability exists in Intel Hardware Accelerated Execution Manager...

ImageCast X Terminal Emulator Code Execution

The vulnerability of the software terminal emulator for ImageCast X relates to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

OESA-2022-1741 swtpm security update

TPM emulator built on libtpms providing TPM functionality for QEMU VMs Security Fixes: RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be...

unicorn:fuzz_emu_arm_arm: Index-out-of-bounds in gen_uc_tracecode

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5443103879725056 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarmarm Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...