libslirp: Multiple vulnerabilities

Background libslirp is a TCP/IP emulator used to provide virtual networking services. Description Multiple vulnerabilities have been discovered in libslirp. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

Ubuntu 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-5010-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5010-1 advisory. Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause...

Libslirp Heap Buffer Overflow DoS

The vulnerability of the ipreass function in the TCP-IP emulator library Libslirp is related to the use of memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

openSUSE 15 Security Update : qemu (openSUSE-SU-2021:1043-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1043-1 advisory. Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virglcmdgetcapset bsc1185981 - CVE-2021-3544: Fix memory leaks found in the...

QEMU Buffer Overflow DoS

The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to compromise data integrity and cause system failures...

Fedora: Security Advisory for libslirp (FEDORA-2021-7cd749f133)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libslirp (FEDORA-2021-71de23bedd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: libslirp-4.3.1-5.fc33

A general purpose TCP-IP emulator used by virtual machine hypervisors to provide virtual networking services...

EulerOS Virtualization 3.0.6.6 : qemu-kvm (EulerOS-SA-2021-2046)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds access flaw was found in the Message Signalled Interrupt MSI-X device support of QEMU. This issue occurs while...

GSD-2021-1001080 KVM: X86: Fix x86_emulator slab cache leak

KVM: X86: Fix x86emulator slab cache leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.13 by commit...

UVI-2021-1000999 KVM: X86: Fix x86_emulator slab cache leak

KVM: X86: Fix x86emulator slab cache leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000999 KVM: X86: Fix x86_emulator slab cache leak

KVM: X86: Fix x86emulator slab cache leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-29545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibility...

PT-2021-29464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibility...

PT-2021-25470

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibilit...

PT-2021-25551

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibilit...

AndyOS Telnet SSH Privilege Escalation

The vulnerability of Telnet and SSH services in the Android emulator AndyOS is related to authentication flaws. Exploiting this vulnerability can allow a hacker to gain root-level privileges...

QEMU: ide: atapi: OOB access while processing read commands

An out-of-bounds read-access flaw was found in the ATAPI Emulator of QEMU. This issue occurs while processing the ATAPI read command if the logical block addressLBA is set to an invalid value. A guest user may use this flaw to crash the QEMU process on the host resulting in a denial of service...

Medium: qemu

Issue Overview: A heap buffer overflow flaw was found in the iSCSI support of QEMU. This flaw could lead to an out-of-bounds read access and possible information disclosure from the QEMU process memory to a malicious guest. The highest threat from this vulnerability is to data confidentiality...

qemu: out-of-bound heap buffer access via an interrupt ID field

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating...