AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2021:5238)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:5238 advisory. QEMU: off-by-one error in modesensepage in hw/scsi/scsi-disk.c CVE-2021-3930 QEMU: net: e1000: infinite loop while processing transmit descriptors...

QEMU Denial of Service Vulnerability (CNVD-2022-84162)

QEMU is a suite of emulation processor software from the personal developer Fabrice Bellard of France. The software is fast and cross-platform, and a denial-of-service vulnerability exists in QEMU, which stems from the incorrect handling of certain values by the QEMU NIC emulator. An attacker...

Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2021:3061)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3061 advisory. - hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation. CVE-2020-13754 ...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2022:0063 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2021-43282

An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller...

CVE-2021-43282: Use of Hard-coded Credentials

An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller...

PT-2021-26062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security vulnerabilities. The actual...

PT-2021-26115

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security vulnerabilities. The actual...

PT-2021-26188

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact...

PT-2021-30183

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.14.9 Description A potential issue exists where the hns3 nic net open function can be called repeatedly. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2021-30057

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact a...

PT-2021-30110

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the hns3 network driver in the Linux Kernel, where the function hns3 nic net open can be called repeatedly, potentially leading to security issues. The actual impact a...

PT-2024-11396

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-rc4+ Description The vulnerability is related to the hns3 nic net open function in the Linux kernel, which is not allowed to be called repeatedly. However, there is no checking for this, and when doing...

CVE-2021-37912

The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in...

ICMP 'Etherleak' Information Disclosure

The remote host is prone to an information disclosure vulnerability over ICMP dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2021-3061)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3061 advisory. - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 libvirt - Resolves: bz1932917 CVE-2021-3416 virt:rhel/qemu-kvm: QEMU...

USN-5010-1: QEMU vulnerabilities

Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2020-15469 Wenxiang Qian discovered that QEMU incorrectly handled certain ATAPI commands. An attacker...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-2011)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : qemu-kvm (EulerOS-SA-2021-2046)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds access flaw was found in the Message Signalled Interrupt MSI-X device support of QEMU. This issue occurs while...