Fedora: Security Advisory for qemu (FEDORA-2022-4387579e67)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: qemu-7.0.0-10.fc37

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

[SECURITY] Fedora 36 Update: qemu-6.2.0-16.fc36

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

The vulnerability of the QEMU hardware emulation software, related to the provision of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a system failure...

The vulnerability of the QEMU hardware emulation software lies in the fact that resources are not released after their useful lifespan has ended. This allows attackers to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the QEMU hardware emulation software, related to the issue of writing operations beyond the buffer boundaries in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

The vulnerability of the QEMU hardware emulation software, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to integer overflows, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the PVRDMA_CMD_CREATE_MR command in the QEMU hardware emulation software allows a hacker to trigger a service failure.

The vulnerability of the PVRDMACMDCREATEMR command in the QEMU hardware emulation software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the SCSI am53c974 adapter driver in the hardware emulation software QEMU allows a hacker to induce a service failure.

The vulnerability of the SCSI am53c974 adapter driver in the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a system failure...

The vulnerability of the input/output requests for the mptsas_free_request() SCSI function in the QEMU hardware emulation software allows a attacker to cause a service failure.

The vulnerability of the input/output requests for the mptsasfreerequest function in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the QEMU hardware emulation software, related to access to an uninitialized pointer, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to access to an uninitialized pointer. Exploiting this vulnerability can allow a malicious actor to cause a system failure...

The vulnerability of QEMU’s emulation of USB devices allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of QEMU’s emulation of hardware devices involves an incorrect pointer being freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the QEMU hardware emulation software, related to the execution of operations beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU allows a hacker to induce a service failure.

The vulnerability of the eepro100 i8255x hardware emulation software by QEMU is related to an uncontrolled recursion. Exploiting this vulnerability could allow a perpetrator to cause a system failure...

[SECURITY] Fedora 36 Update: qemu-6.2.0-14.fc36

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

The vulnerability of the cursor_alloc() function in the QEMU hardware emulation software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the cursoralloc function in the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...