EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2022-2100)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps...

Use-After-Free

qemu is vulnerable to use-after-free. The vulnerability exists in USB EHCI controller emulation because EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets which allows an attacker to cause an application crash...

unicorn:fuzz_emu_s390x_be: Index-out-of-bounds in helper_trXX

Detailed Report: https://oss-fuzz.com/testcase?key=5275834046349312 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemus390xbe Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: helpertrXX Sanitizer: undefined UBSAN Recommend...

unicorn:fuzz_emu_m68k_be: Segv on unknown address in tcg_optimize_m68k

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=4807907520151552 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemum68kbe Job Type: libfuzzerasanunicorn Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cra...

Dynamic analysis of firmware components in IoT devices

Among the various offensive security techniques, vulnerability assessment takes priority when it comes to analyzing the security of IoT/IIoT devices. In most cases, such devices are analyzed using the black box testing approach, in which the researcher has virtually no knowledge about the object ...

PT-2022-1371

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a race condition in the emulation proc handler function of armv8 deprecated.c, which could lead to memory corruption. This may result in local escalation of privilege without requiring...

PT-2025-26132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A pointer dereference issue exists in the emulation proc handler function within the ARM64 architecture support of the Linux kernel. When emulation proc handler is called concurrently wi...

AZL-10003 CVE-2022-1852 affecting package kernel for versions less than 5.15.55.1-1

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...

DEBIAN-CVE-2022-1852

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...

UBUNTU-CVE-2022-1852

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86emulateinsn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU...

PT-2022-22368 · Hewlett Packard +1 · Jenkins Hpe Network Virtualization Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins HPE Network Virtualization Plugin version 1.0 Description: The issue concerns the storage of passwords in an unencrypted manner within the global configuration file on the Jenkins controller. Specifically, the...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the lsidomsgout function hw/scsi/lsi53c895a.c in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the qxlcursor function in the QEMU hardware emulation software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

[SECURITY] Fedora 36 Update: qemu-6.2.0-12.fc36

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

USN-5489-1 qemu vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

USN-5489-1: QEMU vulnerabilities

Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. CVE-2021-3507 It was discovered that QEMU incorrectly...

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System

Trellix Threat Labs Uncovers Critical Flaws in Widely Used Building Access Control System By Trellix · June 9, 2022 This story was also written by Steve Povolny and Sam Quinn. Today at the Hardwear.io Security Trainings and Conference, Trellix Threat Labs is sharing new research into...

AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic

This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud. Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner. We run the attacks covered in the...

Linux kernel code vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. An attacker could force a dereference of the NULL pointer in the Linux kernel via x86emulateinsn to trigger a denial of...

OESA-2022-1679 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets...