37 matches found
The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the `virgl_cmd_get_capset_info()` function in the `contrib/vhost-user-gpu/virgl.c` component of the QEMU hardware emulation software, related to the disclosure of information, allows a malicious actor to gain access to confidential data.
The vulnerability of the virglcmdgetcapsetinfo function in the contrib/vhost-user-gpu/virgl.c component of the QEMU hardware emulation software is related to the disclosure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...
The vulnerability of the `virgl_cmd_get_capset` function in the `hw/display/virtio-gpu-3d.c` component of the QEMU hardware emulation software occurs due to reading data beyond the buffer’s acceptable limits. This allows an attacker to trigger a service failure.
The vulnerability of the virglcmdgetcapset function in the hw/display/virtio-gpu-3d.c component of the QEMU hardware emulation software is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure using the...
An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host resulting in a denial of service condition or potential code execution with the privileges of the QEMU process.
...
An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.
...
DEBIAN-CVE-2021-3545
An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...
CVE-2021-3546
An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...
UBUNTU-CVE-2021-3546
An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on t...
UBUNTU-CVE-2021-3545
An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...
QEMU 缓冲区错误漏洞
QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that originates from a boundary error in the virglcmdgetcapset function of...
DEBIAN-CVE-2016-10028
The virglcmdgetcapset function in hw/display/virtio-gpu-3d.c in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a VIRTIOGPUCMDGETCAPSET command with a maximum capabilities size...
The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.
The vulnerability of the Virtio GPU emulation hardware support in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to cause a service failure or otherwise affect the system as a result of reversing the VIRTIOGPUCMDGETCAPSET...
The vulnerability of the QEMU hardware emulation software allows a hacker to trigger a system failure or cause other adverse effects on the system.
The vulnerability of the Virtio GPU emulation software in QEMU is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder, operating locally, to trigger a service failure or cause other effects on the system as a result of updating the cursor data...
DEBIAN-CVE-2016-9845
QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...
UBUNTU-CVE-2016-9845
QEMU aka Quick Emulator built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSETINFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes...
DEBIAN-CVE-2016-9908
Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...
UBUNTU-CVE-2016-9908
Quick Emulator Qemu built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIOGPUCMDGETCAPSET' command. A guest user/process could use this flaw to leak contents of the host memory bytes...