14315 matches found
Astra Linux – Vulnerability in Qemu
A buffer overflow vulnerability was discovered in the ATI VGA device emulation provided by QEMU. This vulnerability occurs in the ati2dblt routine, during the handling of MMIO write operations, when the guest provides invalid values for the destination display parameters. A malicious guest could...
Astra Linux – Vulnerability in Qemu
A out-of-bounds write vulnerability was discovered in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. This flaw occurs during the processing of the ‘VIRTIOGPUCMDGETCAPSET’ command from the guest. It could allow a privileged guest user to crash the QEMU...
Astra Linux – Vulnerability in Qemu
No description...
Astra Linux – Vulnerability in libslirp
An invalid pointer initialization issue was discovered in the SLiRP networking implementation of QEMU. The flaw exists in the udpinput function and can occur when processing an UDP packet that is smaller than the size of the ‘udphdr’ structure. This issue may lead to out-of-bounds read access or...
Astra Linux – Vulnerability in Qemu
A use-after-free vulnerability was discovered in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue may cause a crash or a virtual machine to escape...
Astra Linux – Vulnerability in Qemu
A reentrancy issue related to DMA operations led to a use-after-free error in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the QEMU implementation of VMWare’s paravirtual RDMA device. This flaw allows a malicious guest driver to allocate and initialize a large number of page tables, which can be used as a ring of descriptors for CQ and async events. This could potentially lead to out-of-bound...
Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 security and bug fix advisory
Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 17.1 Wallaby for Red Hat Enterprise Linux RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...
openstack-nova-compute: Arbitrary Host File Overwrite via Unconstrained qemu-img Format Handling in OpenStack Nova
A flaw in OpenStack Nova’s interaction with the qemu-img utility allows an authenticated user to overwrite arbitrary files on the compute host. This occurs because Nova invokes qemu-img without strictly constraining the disk image format, enabling a malicious user to craft a QCOW2 header on a raw...
GHSA-556C-3R39-WVFX vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-53102 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-aws...
CVE-2026-53113 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-aws...
CVE-2026-53091 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64067 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64068 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64079 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64082 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...
CVE-2026-64154 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange...