Lucene search
+L

287 matches found

OpenVAS
OpenVAS
added 2021/02/09 12:00 a.m.39 views

Ubuntu: Security Advisory (USN-4725-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.4AI score0.00654EPSS
SaveExploits2References2
OSV
OSV
added 2021/02/08 1:12 p.m.13 views

USN-4725-1 qemu vulnerabilities

It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2020-11947 Alexander Bulekov discovered tha...

7.5CVSS6.7AI score0.00654EPSS
SaveExploits2References7
Ubuntu
Ubuntu
added 2021/02/08 1:12 p.m.181 views

USN-4725-1: QEMU vulnerabilities

It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2020-11947 Alexander Bulekov discovered tha...

7.5CVSS6.5AI score0.00654EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2021/02/08 12:00 a.m.57 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4725-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4725-1 advisory. It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this...

7.5CVSS6.5AI score0.00654EPSS
SaveExploits2References7
RedHat Linux
RedHat Linux
added 2021/02/02 12:06 p.m.32 views

QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c

An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...

3.8CVSS7.1AI score0.00377EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/02/02 12:06 p.m.9 views

QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c

An assertion failure flaw was found in QEMU in the network packet processing component. This issue affects the "e1000e" and "vmxnet3" network devices. This flaw allows a malicious guest user or process to abort the QEMU process on the host, resulting in a denial of service...

3.8CVSS7.1AI score0.00377EPSS
SaveExploits0References4
ArchLinux
ArchLinux
added 2020/12/16 12:00 a.m.88 views

[ASA-202012-26] qemu: multiple issues

Arch Linux Security Advisory ASA-202012-26 ========================================== Severity: Medium Date : 2020-12-16 CVE-ID : CVE-2020-14364 CVE-2020-25624 CVE-2020-25625 CVE-2020-25723 CVE-2020-28916 Package : qemu Type : multiple issues Remote : No Link :...

5.5CVSS1.2AI score0.05447EPSS
SaveExploits3References16
Veracode
Veracode
added 2020/12/10 7:58 a.m.39 views

Denial Of Service (DoS)

qemu is vulnerable to denial of service. An attacker is able to transmit a malicious RX descriptor to e1000ewritepackettoguest which induced an infinite loop, causing the qemu to crash resulting in denial of service...

2.7AI score
SaveExploits0
Veracode
Veracode
added 2020/12/10 7:36 a.m.30 views

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. An attacker can engage a use-after-free by sending packet data address to e1000e's MMIO causing a denial of service...

3.3CVSS3.5AI score0.0044EPSS
SaveExploits1References7Affected Software5
OSV
OSV
added 2020/12/04 7:15 a.m.4 views

DEBIAN-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/04 7:15 a.m.8 views

UBUNTU-CVE-2020-28916

hw/net/e1000ecore.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address...

5.5CVSS7AI score0.00654EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2020/12/04 12:00 a.m.56 views

QEMU < 5.2.0-rc3 Heap Use-After-Free DoS (CVE-2020-28916)

The version of QEMU installed on the remote Windows host may be affected by a denial of service DoS vulnerability in the e1000e device emulator due to a heap use-after-free. An attacker can exploit this by sending packets to be received by e1000ewritepackettoguest in order to induce a DoS. Note...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2020/12/01 9:30 a.m.32 views

CVE-2020-28916

An infinite loop flaw was found in the e1000e device emulator in QEMU. This issue could occur while receiving packets via the e1000ewritepackettoguest routine, if the receiveRX descriptor has a NULL buffer address. This flaw allows a privileged guest user to cause a denial of service. The highest...

5.5CVSS3.3AI score0.00654EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2020/12/01 12:00 a.m.9 views

QEMU 安全漏洞

QEMU is a suite of analog processor software. A security vulnerability exists in QEMU. An attacker could exploit this vulnerability to trigger a denial of service on a host system by triggering an overload via QEMU's e1000e null packet descriptor...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References14
OpenVAS
OpenVAS
added 2020/09/29 12:00 a.m.29 views

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.8CVSS5.7AI score0.00377EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/28 12:00 a.m.62 views

EulerOS Virtualization for ARM 64 3.0.6.0 : qemu-kvm (EulerOS-SA-2020-2054)

According to the version of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e a...

3.8CVSS6.5AI score0.00377EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/09/08 12:00 a.m.45 views

Debian DSA-4760-1 : qemu - security update

Multiple security issues were discovered in QEMU, a fast processor emulator : - CVE-2020-12829 An integer overflow in the sm501 display device may result in denial of service. - CVE-2020-14364 An out-of-bounds write in the USB emulation code may result in guest-to-host code execution. -...

5.3CVSS7.3AI score0.05447EPSS
SaveExploits1References13
Tenable Nessus
Tenable Nessus
added 2020/08/20 12:00 a.m.47 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4467-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4467-1 advisory. Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP ec...

6.8CVSS7.1AI score0.02409EPSS
SaveExploits0References14
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.5 views

In QEMU through 5.0.0 an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

...

3.8CVSS7AI score0.00377EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2020/08/18 7:00 a.m.7 views

QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.

...

3.3CVSS7AI score0.0044EPSS
SaveExploits1
Rows per page
Query Builder