qemu-kvm: net: assertion failure in update_sctp_checksum()

A flaw was found in QEMU. An assertion failure was present in the updatesctpchecksum function in hw/net/nettxpkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition...

QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx()

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

Oracle Linux 9 : qemu-kvm (ELSA-2025-4492)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4492 advisory. 9.0.0-10.el95.3 - kvm-target-i386-fix-feature-dependency-for-WAITPKG.patch RHEL-84866 - Resolves: RHEL-84866 Live migration after workload update fails...

RHEL 9 : qemu-kvm (RHSA-2025:4492)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4492 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide th...

CBL Mariner 2.0 Security Update: qemu (CVE-2024-4467)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-4467 advisory. - A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file...

qemu-kvm security update

9.0.0-10.el95.3 - kvm-target-i386-fix-feature-dependency-for-WAITPKG.patch RHEL-84866 - Resolves: RHEL-84866 Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: waitpkg rhel-9.5.z...

CBL Mariner 2.0 Security Update: qemu (CVE-2024-3447)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3447 advisory. - A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both...

CBL Mariner 2.0 Security Update: qemu (CVE-2024-6505)

The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6505 advisory. - A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card...

CVE-2024-4467 affecting package qemu for versions less than 6.2.0-24

CVE-2024-4467 affecting package qemu for versions less than 6.2.0-24. A patched version of the package is available...

CVE-2024-6505 affecting package qemu for versions less than 6.2.0-24

CVE-2024-6505 affecting package qemu for versions less than 6.2.0-24. A patched version of the package is available...

CVE-2024-3447 affecting package qemu for versions less than 6.2.0-24

CVE-2024-3447 affecting package qemu for versions less than 6.2.0-24. A patched version of the package is available...

Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

...

Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()

...

Qemu-kvm: 'qemu-img info' leads to host file read/write

...

Debian: Security Advisory (DLA-4144-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4144-1] qemu security update

Debian LTS Advisory DLA-4144-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón April 30, 2025 https://wiki.debian.org/LTS Package : qemu Version : 1:5.2+dfsg-11+deb11u4 CVE ID : CVE-2023-1544 CVE-2023-3019 CVE-2023-5088 CVE-2023-6693 CVE-2024-3447 Debian Bug...

DLA-4144-1 qemu - security update

Bulletin has no description...

Debian dla-4144 : qemu - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4144 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4144-1 [email protected]...

Azure Linux 3.0 Security Update: qemu (CVE-2023-6693)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6693 advisory. - A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in...

Azure Linux 3.0 Security Update: qemu (CVE-2023-6683)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6683 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The...