47 matches found
S-V-Project-Implementation-of-CVE-2015-3256
CVE-2015-3456 VENOM — QEMU Crash PoC and Analysis This repository contains a reproducible crash/DoS proof-of-concept for CVE-2015-3456 "VENOM" using a vulnerable version of QEMU v2.3.0. The project demonstrates: Guest-controlled writes to the virtual floppy disk controller FDC Triggering the...
EUVD-2026-109605
A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument fileextension results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been...
Gouguoa permission and access control issue vulnerability
Versions 6.1.2 and earlier of gouguoa contain a security vulnerability. This vulnerability arises from the file upload functionality in the chunkUpload function within app/disk/controller/Api.php; it allows unrestricted file uploads and may be exploited remotely...
PT-2026-123159
A security flaw has been discovered in GouGuOA up to 6.1.2. The impacted element is the function chunkUpload of the file app/disk/controller/Api.php. The manipulation of the argument file extension results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been...
Linux drivers/scsi/mpt3sas DoS
The vulnerability of the drivers/scsi/mpt3sas component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
ata: libata-sff: Ensure that we cannot write outside the allocated buffer
...
EUVD-2007-2886
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2015-3456
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Floppy Disk Controller FDC in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service out-of-bounds write and...
DEBIAN-CVE-2025-21656
In the Linux kernel, the following vulnerability has been resolved: hwmon: drivetemp Fix driver producing garbage data when SCSI errors occur scsiexecutecmd function can return both negative linux codes and positive scsicmnd result field error codes. Currently the driver just passes error codes o...
QEMU: am53c974: denial of service due to division by zero
A denial of service vulnerability was found in the qemu package. A division by zero in the scsidiskreset function can cause QEMU and the guest to stop immediately...
SUSE CVE-2015-3456
The Floppy Disk Controller FDC in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service out-of-bounds write and guest crash or possibly execute arbitrary code via the 1 FDCMDREADID, 2 FDCMDDRIVESPECIFICATIONCOMMAND, or other unspecified commands, ak...
FreeBSD security vulnerabilities
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD suffers from a security vulnerability that originates from a boundary error in the mpr, mps, and mpt disk collector drivers. A local attacker could exploit the vulnerability to escalate privileges on the system...
UBUNTU-CVE-2020-9383
An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2...
Venom
Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...
Venom - Lenovo Support US
No description provided...
UBUNTU-CVE-2015-5154
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...
DLA-268-1 virtualbox-ose - security update
Bulletin has no description...
Security Advisory - VENOM Vulnerability in Huawei Products
Huawei has noticed the buffer overflow vulnerability in the floppy disk controller FDC of QEMU disclosed by open source organization Xen. This vulnerability allows an attacker to escape out of the virtual machine, execute code on the physical host with full privilege. Vulnerability ID:...
qemu: fdc: out-of-bounds fifo buffer memory access
An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller FDC handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially, execute arbitrary code on the host with the privileg...
QEMU - Floppy Disk Controller (FDC) PoC
Exploit for multiple platform in category dos / poc // Source: https://marc.info/?l=oss-security&m=143155206320935&w=2 include define FIFO 0x3f5 int main int i; iopl3; outb0x0a,0x3f5; / READ ID / for i=0;i10000000;i++ outb0x42,0x3f5; / push / 0day.today 2018-03-13...