Lucene search
+L

194 matches found

Tenable Nessus
Tenable Nessus
added 2021/03/04 12:0 a.m.37 views

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2021-1527)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw...

7.5CVSS6.6AI score0.04093EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/01/08 12:0 a.m.33 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2021-1046)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.2AI score0.04093EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/02 12:0 a.m.39 views

EulerOS 2.0 SP8 : qemu (EulerOS-SA-2020-2320)

According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an...

5.5CVSS6.2AI score0.01796EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2020/10/21 12:0 a.m.46 views

EulerOS Virtualization 3.0.2.2 : qemu-kvm (EulerOS-SA-2020-2200)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The qemu-nbd server in QEMU aka Quick Emulator, when built with the Network Block Device NBD Server support, allows remote attacke...

7.5CVSS7.1AI score0.04093EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/06/11 12:0 a.m.21 views

QEMU < 5.0.1 DoS Vulnerability

QEMU is prone to a denial of service DoS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

5CVSS5.4AI score0.01796EPSS
Exploits0References2
NVD
NVD
added 2020/06/09 1:15 p.m.18 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

5CVSS5.3AI score0.01796EPSS
Exploits0References6
OSV
OSV
added 2020/06/09 1:15 p.m.28 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

5CVSS6.3AI score0.01796EPSS
Exploits0References6
Prion
Prion
added 2020/06/09 1:15 p.m.32 views

Authentication flaw

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

4CVSS4.8AI score0.01796EPSS
Exploits0References6Affected Software4
Cvelist
Cvelist
added 2020/06/09 12:7 p.m.41 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server in all QEMU versions before QEMU 5.0.1. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the...

5CVSS5.3AI score0.01796EPSS
Exploits0References6
CVE
CVE
added 2020/06/09 12:7 p.m.193 views

CVE-2020-10761

CVE-2020-10761 affects the Network Block Device (NBD) Server in all QEMU versions before 5.0.1. A remote nbd-client sending a spec-compliant request near the maximum permitted length can trigger an assertion failure, crashing the qemu-nbd server and causing a denial of service. The issue is roote...

5CVSS5.1AI score0.01796EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2020/06/09 5:24 a.m.29 views

CVE-2020-10761

An assertion failure issue was found in the Network Block DeviceNBD Server of the QEMU. This flaw occurs when an nbd-client sends a spec-compliant request that is near the boundary of maximum permitted request length. A remote nbd-client could use this flaw to crash the qemu-nbd server resulting ...

4CVSS3.7AI score0.01796EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2020/04/05 4:54 p.m.32 views

CVE-2017-15119

The Network Block Device NBD server in Quick Emulator QEMU, is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other...

8.6CVSS1.9AI score0.03325EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.40 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2017-1224)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.04028EPSS
Exploits0References2
Veracode
Veracode
added 2019/05/16 2:53 a.m.29 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service attacks. A remote unauthenticated attacker could send large option requests, making the server waste CPU time to keep the NBD server from serving other requests, resulting in denial of service conditions...

8.6CVSS8.6AI score0.03325EPSS
Exploits0References126Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:0 a.m.40 views

EulerOS Virtualization 3.0.1.0 : qemu (EulerOS-SA-2019-1444)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow issue was found in the NE200 NIC emulation. It could occur while receiving packets from the network, if the siz...

9CVSS7AI score0.25348EPSS
Exploits8References17
Veracode
Veracode
added 2019/01/15 9:17 a.m.75 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. Quick Emulator QEMU built with Network Block Device NBD Server support was vulnerable to a null-pointer dereference issue. The flaw could occur when releasing a client, which was not initialized due to failed negotiation. A remote user or process could...

7.5CVSS7.2AI score0.04093EPSS
Exploits0References10Affected Software1
Prion
Prion
added 2018/07/27 9:29 p.m.13 views

Stack overflow

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

7.5CVSS9.4AI score0.11931EPSS
Exploits3References7Affected Software3
NVD
NVD
added 2018/07/27 9:29 p.m.32 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS8.7AI score0.11931EPSS
Exploits3References7
OSV
OSV
added 2018/07/27 9:29 p.m.20 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

9.8CVSS6.9AI score0.11931EPSS
Exploits3References7
Cvelist
Cvelist
added 2018/07/27 9:0 p.m.46 views

CVE-2017-15118

A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requir...

8.3CVSS8.6AI score0.11931EPSS
Exploits3References7
Rows per page
Query Builder