QEMU 'xilinx_ethlite.c' heap buffer overflow vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU 'xilinxethlite.c' suffers from a heap buffer overflow vulnerability that allows an attacker to exploit the vulnerability to execute arbitrary code on the host, a...

Qemu: virtio: unbounded memory allocation on host via guest leading to DoS

Quick Emulator QEMU built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement results in unbounded memory allocation ...

QEMU Denial of Service Vulnerability (CNVD-2016-07820)

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker can exploit this vulnerability to crash the QEMU process, resulting in a denial of service...

Android Security Virtual Machine: Androl4b

Android Security Virtual Machine AndroL4b is an android security virtual machine based on ubuntu-mate includes the collection of latest framework, tutorials and labs from different security geeks and researchers for reverse engineering and malware analysis. The tools directory contains tools and...

MITM BLE Security Assessment: gattacker

MITM BLE Security Assessment A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more The tool creates exact copy of attacked device in Bluetooth layer, and then tricks mobile application to interpret its broadcasts and connect to it instead the original device. At the same time, i...

UBUNTU-CVE-2016-7156

The pvscsiconvertsglist function in hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by leveraging an incorrect cast...

DEBIAN-CVE-2016-6351

The espdodma function in hw/scsi/esp.c in QEMU aka Quick Emulator, when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service out-of-bounds write and QEMU process crash or execute arbitrary code on the QEMU host via vectors involvi...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the virtqueuepop function in the QEMU hardware/virtio/virtio.c file is related to resource management errors. Exploiting this vulnerability allows a local attacker to cause a service failure e.g., memory consumption, premature termination of the QEMU process by sending reques...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the megasaslookupframe function in the QEMU hardware emulation software is related to the construction of the host adapter for the MegaRAID SAS 8708EM2 device. Exploiting this vulnerability allows a local attacker to cause service failures, such as out-of-memory reading and...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to read memory on the host machine

The vulnerability of the megasasdcmdcfgread function in the hw/scsi/megasas.c file of the hardware emulation software QEMU is related to the creation of a host adapter for the MegaRAID SAS 8708EM2 device. Exploiting this vulnerability allows an attacker to read memory from the host device by usin...

The vulnerabilities of the RUMBA terminal emulator allow a hacker to execute arbitrary code.

The multiple vulnerabilities of the RUMBA terminal emulator are caused by an overflow in the stack buffer. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code using values from the NetworkName property in ObjectXSNAConfig.ObjectXSNAConfig iconfig.dll, the CPName...

The vulnerability of the RUMBA terminal emulator allows a hacker to execute arbitrary code.

The vulnerability of the PlayMacro function in ObjectXMacro.ObjectXMacro WdMacCtl.ocx, a terminal emulator RUMBA, is caused by buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code using a long MacroName argument...

Terminal Emulator for Android - Exported components, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Terminal Emulator for Android published at the 'play' market has multiple vulnerabilities...

CVE-2016-4952

CVE-2016-4952 affects QEMU when built with VMWARE PVSCSI paravirtual SCSI bus emulation; it allows a local privileged guest OS user to trigger an out-of-bounds access in PVSCSI_CMD_SETUP_RINGS or PVSCSI_CMD_SETUP_MSG_RING, causing a denial of service. OpenVAS/Nessus entries in related advisories ...

Dynamic Instrumentation Tool Platform: DynamoRIO

Dynamic Instrumentation Tool Platform DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2016-6833

Use-after-free vulnerability in the vmxnet3iobar0write function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU instance crash by leveraging failure to check if the device is active...

QEMU '/hw/net/net_tx_pkt.c' integer overflow vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from an integer overflow vulnerability. An attacker can exploit the vulnerability to collide instances of QEMU, resulting in a denial of service situation...

PT-2016-7129 · Qemu +3 · Qemu +3

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and QEMU process crash. This is achieved by setting a zero length for the current...

UBUNTU-CVE-2016-6833

Use-after-free vulnerability in the vmxnet3iobar0write function in hw/net/vmxnet3.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service QEMU instance crash by leveraging failure to check if the device is active...