ESXi 6.5 / 6.7 / 7.0 Heap Overflow RCE (VMSA-2022-0001)

The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by a heap overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute...

QEMU vmxnet3 DoS

The vulnerability of the vmxnet3 network card emulator, a component of the QEMU hardware emulation software, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to cause a system failure...

QEMU Loop Exit Condition DoS

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

QEMU Hardware Emulation DoS

The vulnerability of the QEMU hardware emulation software is related to the allocation of unlimited memory. Exploiting this vulnerability allows a hacker to cause a system failure...

QEMU Resource Leak DoS

The vulnerability of the QEMU hardware emulation software is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability allows a perpetrator to cause service failures...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

[SECURITY] Fedora 37 Update: rizin-0.4.1-1.fc37

Rizin is a free and open-source Reverse Engineering framework, providing a complete binary analysis experience with features like Disassembler, Hexadecimal editor, Emulation, Binary inspection, Debugger, and more. Rizin is a fork of radare2 with a focus on usability, working features and co de...

QEMU Loop Exit Condition DoS

The vulnerability of the QEMU hardware emulation engine is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a perpetrator to trigger a service failure...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

QEMU SCSI Function Input Output Request DoS

The vulnerability of the input/output requests for the mptsasfreerequest function in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability allows a attacker to cause a service failure...

QEMU ioport hardware emulation Pointer Swapping DoS

The vulnerability of the ioport hardware emulation software under QEMU is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

QEMU Integer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a system failure...

QEMU Hardware Emulation DoS

The vulnerability of the PVRDMACMDCREATEMR command in the QEMU hardware emulation software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to cause a system failure...

QEMU SCSI am53c974 Buffer Overflow DoS

The vulnerability of the SCSI am53c974 adapter driver in the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a system failure...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to an infinite loop in USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring...

Use After Free

qemu is vulnerable to a use-after-free. LSI53C895A SCSI Host Bus Adapter emulation of QEMU occurs while processing repeated messages to cancel the current SCSI request via the lsidomsgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host...

GSD-2022-1006321 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006279 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006266 arm64: fix oops in concurrently setting insn_emulation sysctls

arm64: fix oops in concurrently setting insnemulation sysctls This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...

GSD-2022-1006187 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.256 by commit...