Astra Linux - уязвимость в qemu

In QEMU 5.0.0, the file hw/net/e1000ecore.c contains an infinite loop that occurs due to a NULL buffer address in the RX descriptor...

Astra Linux - уязвимость в qemu

QEMU 4.2.0 has a use-after-free issue in hw/net/e1000ecore.c, as a user of the guest OS can trigger an e1000e packet with the data’s address set to the e1000e’s MMIO address...

SUSE CVE-2020-15859

QEMU 4.2.0 has a use-after-free in hw/net/e1000ecore.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address...

SUSE CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

DEBIAN-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

UBUNTU-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.

...

PT-2020-6484 · Qemu +9 · Qemu +9

Name of the Vulnerable Software and Affected Versions: QEMU version 5.0.0 Description: The issue is related to an infinite loop in the hw/net/e1000e core.c component of the QEMU emulator. This loop can be triggered via an RX descriptor with a NULL buffer address, potentially allowing an attacker ...

QEMU Resource Management Error Vulnerability (CNVD-2020-42658)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A security vulnerability exists in the hw/net/e1000ecore.c file in QEMU version 4.2.0. An attacker can exploit this...

DEBIAN-CVE-2020-15859

QEMU 4.2.0 has a use-after-free in hw/net/e1000ecore.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address...

PT-2020-6474 · Qemu +8 · Qemu +8

Name of the Vulnerable Software and Affected Versions: QEMU version 4.2.0 Description: The issue is related to a use-after-free in the e1000e core of QEMU's hardware emulation, specifically in the hw/net/e1000e core.c file. This can be triggered by a guest OS user sending an e1000e packet with it...