2612 matches found
QEMU Buffer Overflow DoS
The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
eepro100 i8255x hardware emulation software QEMU DoS
The vulnerability of the eepro100 i8255x hardware emulation software by QEMU is related to an uncontrolled recursion. Exploiting this vulnerability could allow a perpetrator to cause a system failure...
DEBIAN-CVE-2022-0216
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsidomsgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU...
AZL-35152 CVE-2021-3929 affecting package qemu for versions less than 6.2.0-18
A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...
DEBIAN-CVE-2021-3929
A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...
AZL-10721 CVE-2021-3929 affecting package qemu for versions less than 6.2.0-13
A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...
CVE-2021-3929
A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...
PT-2022-7562
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn't check whether the destination...
[SECURITY] Fedora 36 Update: qemu-6.2.0-14.fc36
qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...
CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
UBUNTU-CVE-2020-14394
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...
CVE-2020-14394
CVE-2020-14394 is an issue in QEMU where the USB xHCI controller emulation can enter an infinite loop while computing the length of the TRB Ring, allowing a privileged guest to hang the host QEMU process (DoS). Affected component: QEMU’s USB xHCI controller emulation; root cause: incorrect handli...
PT-2022-7373
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring, allowing a privileged guest user to hang the QEMU process on the...
GLSA-202208-27 : QEMU: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202208-27 QEMU: Multiple Vulnerabilities - QEMU 4.2.0 has a use-after-free in hw/net/e1000ecore.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. CVE-2020-15859 -...
Intel HAXM security vulnerabilities
Intel HAXM Intel Hardware Accelerated Execution Manager is a cross-platform hardware-assisted virtualization engine hypervisor from Intel Corporation that is widely used as a gas pedal for Android Emulator and QEMU. A security vulnerability exists in Intel Hardware Accelerated Execution Manager...
What We're Looking Forward to at Black Hat, DEF CON, and BSidesLV 2022
The week of Black Hat, DEF CON, and BSides is highly anticipated annual tradition for the cybersecurity community, a weeklong chance for security pros from all corners of the industry to meet in Las Vegas to talk shop and share what they've spent the last 12 months working on. But like many belov...
GSD-2022-1004867 ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction
ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...
PT-2022-32460
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the alignment and advancement of the IT state after emulating a Thumb instruction. The actual impact and potential for attack have not been proven yet. Recommendations...
EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2022-2213)
According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the...
QEMU Cursor Alloc DoS
The vulnerability of the cursoralloc function in the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...