qemu -- buffer overflow vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver support is vulnerable to a buffer overflow flaw leading to a heap memory corruption issue. It could occur while refreshing the server display surface via routine vncrefreshserversurface. A...

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

DEBIAN-CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

Design/Logic Flaw

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

UBUNTU-CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

SUSE-SU-2015:1479-2 Security update for xen

xen was updated to fix the following security issues: CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model bsc939712, XSA-140 CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol bsc939709, XSA-139 CVE-2015-2751: Certain domctl operations could have be used to...

SUSE-SU-2015:1479-1 Security update for xen

xen was updated to fix the following security issues: CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model bsc939712, XSA-140 CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol bsc939709, XSA-139 CVE-2015-2751: Certain domctl operations could have be used to...

SUSE-SU-2015:1404-1 security update for xen

This security update of Xen fixes the following issues: bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 bsc939709 XSA-139: Use after free in QEMU/Xen block unplug protocol CVE-2015-5166...

PT-2015-1968 · Qemu Team +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to the version used in Xen 4.6 Xen versions 4.5.x and earlier Description: The issue is related to the C+ mode offload emulation in the RTL8139 network card device model in QEMU. It allows remote attackers to read process...

Qemu RTL8139 Uninitialized Heap Memory Information Disclosure Vulnerability

QEMU is an open source emulator software. Qemu, which supports RTL8139 emulation, suffers from an information disclosure vulnerability when processing network messages in the C+ operating mode of the RTL8139 processor, which can be exploited by a client user to read uninitialized Qemu heap memory...

QEMU leak of uninitialized heap memory in rtl8139 device model

ISSUE DESCRIPTION The QEMU model of the RTL8139 network card did not sufficiently validate inputs in the C+ mode offload emulation. This results in uninitialised memory from the QEMU process's heap being leaked to the domain as well as to the network. IMPACT A guest may be able to read sensitive...

freexl -- integer overflow

Stefan Cornelius reports: There's an integer overflow in the allocatecells function when trying to allocate the memory for worksheet with specially crafted row/column dimensions. This can be exploited to cause a heap memory corruption. The most likely outcome of this is a crash when trying to...

Ubiquiti Inc.: Buffer Overflow in PHP of the AirMax Products

Vulnerability The function static int ubnormalizefilenamechar filename implemented by the patch 430-smart-post-upload.patch in the file uploadbuffer.c on the SDK.UBNT.v5.5 have the following code: static int ubnormalizefilenamechar filename char fwdslash; char backslash; sizet size; / Some commen...

Paintshop Pro X7 - .gif Conversion Heap Memory Corruption LZWMinimumCodeSize (Denial of Service)

Paintshop Pro X7 - .gif Conversion Heap Memory Corruption LZWMinimumCodeSize Denial of Service Application: Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Paintshop Prox X7, Other...

Paintshop Pro X7 - '.gif' Conversion Heap Memory Corruption 'LZWMinimumCodeSize' (Denial of Service)

Application: Paintshop Pro X7 GIF Conversion Heap Memory Corruption Vulnerabilities LZWMinimumCodeSize Platforms: Windows Versions: The vulnerability is confirmed in version Paintshop Prox X7, Other versions may also be affected. Secunia: PRL: 2015-06 Author: Francis Provencher Protek Research...

CUPS < 2.0.3 Multiple Vulnerabilities

According to its banner, the CUPS printer service running on the remote host is a version prior to 2.0.3. It is, therefore, potentially affected by the following vulnerabilities : - A privilege escalation vulnerability exists due to a flaw in cupsd when handling printer job request errors. An...

Adobe Flash Player ASLR Protection Bypass Vulnerability

Adobe Flash Player is a Flash file handling program. A security vulnerability exists in Adobe Flash Player that allows remote attackers to perform unauthorized operations by exploiting a vulnerability that bypasses the memory address randomization restriction in Flash heap memory. 64 of windows 7...