UBUNTU-CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

CVE-2022-3872 — QEMU SDHCI off-by-one read/write : A vulnerability in the SDHCI device (Buffer Data Port Register) when data_count == block_size, exploitable by a malicious guest to crash the QEMU process on the host, causing denial of service. Affected component: QEMU SDHCI read_dataport/write_d...

PT-2022-6798 · Qemu +4 · Qemu +4

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to an off-by-one read/write problem in the SDHCI device of QEMU. It occurs when reading or writing the Buffer Data Port Register in sdhci read dataport and sdhci write...

CVE-2022-3872: Off-by-one Error

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

CVE-2022-3872

An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Port Register in sdhcireaddataport and sdhciwritedataport, respectively, if datacount == blocksize. A malicious guest could use this flaw to crash the QEMU process on the host,...

GSD-2022-1006248 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006147 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...

GSD-2022-1005853 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005247 mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch

mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GLSA-202208-27 : QEMU: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-27 QEMU: Multiple Vulnerabilities - QEMU 4.2.0 has a use-after-free in hw/net/e1000ecore.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. CVE-2020-15859 -...

PT-2025-26067

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the sdhci-of-esdhc component. The of find matching node function returns a node pointer with an incremented...

Oracle Linux 8 : kvm_utils (ELSA-2021-9568)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9568 advisory. - In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CVE-2020-15469 - A flaw was foun...

qemu:qemu-fuzz-i386-target-generic-fuzz-sdhci-v3: Index-out-of-bounds in sd_read_byte

Detailed Report: https://oss-fuzz.com/testcase?key=5317931171971072 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-sdhci-v3 Job Type: libfuzzerubsanqemu Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: sdreadbyte sdbusreaddata...