QEMU 访问控制错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from an Access Control Error vulnerability that can be exploited by an attacker to bypass access restrictions via virtiofsd in ord...

[SECURITY] Fedora 32 Update: adplug-2.3.3-1.fc32

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

[SECURITY] Fedora 33 Update: adplug-2.3.3-1.fc33

AdPlug is a free software, cross-platform, hardware independent AdLib sound player library, mainly written in C++. AdPlug plays sound data, originally created for the AdLib OPL2/3 audio board, directly from its original format on top of an OPL2/3 emulator or by using the real hardware. No OPL2/3...

Raiden Emulator (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-05553)

Thunderbolt Emulator is a free Android emulator. Raiden Emulator Windows client suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

The vulnerability of several functions in hw/usb/core.c of the QEMU hardware emulation software involves allowing operations to exceed the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of several functions in the hw/usb/core.c file of the QEMU hardware emulation software is related to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrit...

EulerOS Virtualization 3.0.2.6 : qemu (EulerOS-SA-2021-1057)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper...

DEBIAN-CVE-2019-20808

In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the aticursordefine routine while handling MMIO write operations through the atimmwrite callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service...

Debian DSA-4819-1 : kitty - security update

Stephane Chauveau discovered that the graphics protocol implementation in Kitty, a GPU-based terminal emulator, did not sanitise a filename when returning an error message, which could result in the execution of arbitrary shell commands when displaying a file with cat. C Tenable Network Security,...

[SECURITY] [DSA 4819-1] kitty security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4819-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 26, 2020 https://www.debian.org/security/faq -...

Elevation of Privilege Vulnerability in the Windows Client of Night God Emulator

Night God Emulator is a completely free software. An elevation of privilege vulnerability exists in the Windows client of NightGod Emulator, which can be exploited by an attacker to gain control of the server...

The vulnerability of the iSCSI protocol emulator hardware support provided by QEMU, which allows a hacker to execute arbitrary code or cause a system failure.

The vulnerability of the iSCSI protocol emulation software developed by QEMU is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a denial-of-service attack...

Binary Vulnerability in Night God Emulator (Windows Client)

Night God Emulator is a completely free software. A binary vulnerability exists in Night God Emulator Windows client, which can be exploited by attackers to elevate kernel privileges...

Fedora: Security Advisory for libslirp (FEDORA-2020-77f93f41be)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Amazon Linux 2 : qemu (ALAS-2020-1570)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1570 advisory. A use-after-free issue was found in the SLiRP networking implementation of the QEMU emulator. The issue occurs in ipreass...

Exploit for CVE-2016-2384

This repository contains proof-of-concept exploits for two Linux kernel vulnerabilities: CVE-2016-2384 and CVE-2017-6074. CVE-2016-2384 is a double-free vulnerability in the USB MIDI driver. The exploit is a part of a proof-of-concept exploit for the vulnerability in the usb-midi driver. It is...

QEMU 代码问题漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU has a code issue vulnerability that can be exploited by an attacker to force an assertion error via QEMU's usb packet mapping to trigger a...

QEMU 缓冲区错误漏洞

QEMU is a suite of analog processor software. QEMU suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a stack buffer over-read via a value obtained from a host controller driver...

[SECURITY] Fedora 33 Update: swtpm-0.5.1-2.20201117git96f5a04.fc33

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

[SECURITY] Fedora 32 Update: swtpm-0.5.1-2.20201117git96f5a04.fc32

TPM emulator built on libtpms providing TPM functionality for QEMU VMs...

Fedora: Security Advisory for swtpm (FEDORA-2020-00d28cf56b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...