qemu -- denial of service vulnerabilities in NE2000 NIC support

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the NE2000 NIC emulation support is vulnerable to an infinite loop issue. It could occur when receiving packets over the network. A privileged user inside guest could use this flaw to crash the Qemu instance resulti...

UBUNTU-CVE-2015-5278

The ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service infinite loop and instance crash or possibly execute arbitrary code via vectors related to receiving packets...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 5.0, 6.0 and 7.0, for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System...

[SECURITY] Fedora 23 Update: qemu-2.4.0-2.fc23

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

Debian DSA-3348-1 : qemu - security update

Several vulnerabilities were discovered in qemu, a fast processor emulator. - CVE-2015-3214 Matt Tait of Google's Project Zero security team discovered a flaw in the QEMU i8254 PIT emulation. A privileged guest user in a guest with QEMU PIT emulation enabled could potentially use this flaw to...

Debian Security Advisory DSA 3348-1 (qemu - security update)

Several vulnerabilities were discovered in qemu, a fast processor emulator. CVE-2015-3214 Matt Tait of Google OpenVAS Vulnerability Test $Id: deb3348.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3348-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks...

[SECURITY] Fedora 21 Update: qemu-2.1.3-9.fc21

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

USN-2724-1: QEMU vulnerabilities

It was discovered that QEMU incorrectly handled a PRDT with zero complete sectors in the IDE functionality. A malicious guest could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. CVE-2014-9718 Donghai Zhu discovered that QEMU...

[SECURITY] Fedora 23 Update: qemu-2.4.0-1.fc23

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

Fedora 21 : audit-2.4.4-1.fc21 (2015-13471)

This update fixes CVE-2015-5186. The issue is that ausearch/report did not escape terminal emulator sequences when interpreting untrusted data. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[SECURITY] Fedora 22 Update: qemu-2.3.1-1.fc22

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

UBUNTU-CVE-2015-5154

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands...

D-link DIR-645 Command Injection - Buffer Overflow Exploit

Exploit for hardware platform in category web applications Exploit Title: DIR-645 D-link Command Injection - Buffer Overflow Type: Command Injection - Buffer Overflow Date: 22/07/2015 Exploit Author: DNO Version: DIR-645 FW 1.04b12 Tested on: linux "ubuntu" CVE : N/A...

ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)

ZOC Terminal Emulator 7 - Quick Connection Crash PoC !/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download:...

FreeBSD : xen-kernel -- Hypervisor memory corruption due to x86 emulator flaw (83a28417-27e3-11e5-a4a5-002590263bf5)

The Xen Project reports : Instructions with register operands ignore eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override can, however, corrupt a pointer used subsequently to store the result of the instruction. A malicious gue...

ZOC Terminal Emulator 7 - Quick Connection Crash (PoC)

!/usr/bin/python + Author: SATHISH ARTHAR + Exploit Title: ZOC Terminal Emulator-v7 Memory Corruption PoC + Date: 14-07-2015 + Category: DoS/PoC + Tested on: WinXp/Windows7/windows8 + Vendor: http://www.emtec.com + Download: http://www.emtec.com/downloads/zoc/zoc7051.exe + Sites:...

Gunpoder Android Malware Hides Malicious Behaviors in Adware

A stream of new Android malware infections is sounding a harsh tone on two fronts: hackers are making free and open source applications their own; and legacy security software needs to step up detection of adware behaving maliciously. The Gunpoder malware is spreading via third-party Android app...

qemu -- denial of service vulnerability in MSI-X support

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the PCI MSI-X support is vulnerable to null pointer dereference issue. It occurs when the controller attempts to write to the pending bit arrayPBA memory region. Because the MSI-X MMIO support did not define the...

openSUSE Security Update : xen (openSUSE-2015-434) (Venom)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests...

QEMU 'pit_ioport_read()' function memory corruption vulnerability

QEMU is an open source emulator software. QEMU has a memory corruption vulnerability in the pitioportread function, which allows an attacker to exploit this vulnerability to execute arbitrary code on the host...