287 matches found
Ubuntu: Security Advisory (USN-4725-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4725-1 qemu vulnerabilities
It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2020-11947 Alexander Bulekov discovered tha...
USN-4725-1: QEMU vulnerabilities
It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2020-11947 Alexander Bulekov discovered tha...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4725-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4725-1 advisory. It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this...
QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c
An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...
QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c
An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...
[ASA-202012-26] qemu: multiple issues
Arch Linux Security Advisory ASA-202012-26 ========================================== Severity: Medium Date : 2020-12-16 CVE-ID : CVE-2020-14364 CVE-2020-25624 CVE-2020-25625 CVE-2020-25723 CVE-2020-28916 Package : qemu Type : multiple issues Remote : No Link :...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. An attacker is able to transmit a malicious RX descriptor to e1000ewritepackettoguest which induced an infinite loop, causing the qemu to crash resulting in denial of service...
Denial Of Service (DoS)
QEMU is vulnerable to denial of service. An attacker can engage a use-after-free by sending packet data address to e1000e's MMIO causing a denial of service...
DEBIAN-CVE-2020-28916
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
UBUNTU-CVE-2020-28916
hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...
QEMU < 5.2.0-rc3 Heap Use-After-Free DoS (CVE-2020-28916)
The version of QEMU installed on the remote Windows host may be affected by a denial of service DoS vulnerability in the e1000e device emulator due to a heap use-after-free. An attacker can exploit this by sending packets to be received by e1000ewritepackettoguest in order to induce a DoS. Note...
CVE-2020-28916
An infinite loop flaw was found in the e1000e device emulator in QEMU. This issue could occur while receiving packets via the e1000ewritepackettoguest routine, if the receiveRX descriptor has a NULL buffer address. This flaw allows a privileged guest user to cause a denial of service. The highest...
QEMU 安全漏洞
QEMU is a suite of analog processor software. A security vulnerability exists in QEMU. An attacker could exploit this vulnerability to trigger a denial of service on a host system by triggering an overload via QEMU's e1000e null packet descriptor...
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-2054)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-2054)
According to the version of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a...
Debian DSA-4760-1 : qemu - security update
Multiple security issues were discovered in QEMU, a fast processor emulator : - CVE-2020-12829 An integer overflow in the sm501 display device may result in denial of service. - CVE-2020-14364 An out-of-bounds write in the USB emulation code may result in guest-to-host code execution. -...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4467-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4467-1 advisory. Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP ec...
In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.
...