TinyXPB

TinyXPB 要件: XP SP3 を実行している仮想マシンまたは Bochs（XP SP0 では動作しません。他のバージョンでは動作する場合があります） 使用方法: 1. build.bat を実行する 2. floppy.img を任意の場所にコピーする 3. 仮想マシン / Bochs が floppy.img から起動するように設定する 4. 起動! 実行ファイル: Tools\MakeImage\imagefs.exe - コマンドラインフロッピーイメージ操作ツール Tools\FASM\FASM.EXE - Flat Assembler コマンドラインツール 作者:...

cve-2015-3456

CVE-2015-3456 관련 실험 다음이 있습니다: exploit/는 "익스플로잇"입니다 단순히 QEMU를 크래시시킵니다. mock/에는 축소된 QEMU 버전이 포함되어 있습니다. 취약점만 남아 있습니다. patch/에는 실행 중인 QEMU 인스턴스를 패치하는 프로그램이 포함되어 있습니다. 핵심은 디버그 심볼이나 디스크 상의 원래 실행 파일이 필요 없다는 점입니다. 따라서 이 프로그램이 예상대로 작동하려면 일부 정보를 제공해야 합니다. 모든 라이브 패치의 주요 아이디어는 commandtohandler 배열을 수정하여 각 명령...

CVE-2018-7273

include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // 명령 설정 rawcmd.cmdrawcmd.cmdcount++ = 0x07;...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM — QEMU 충돌 PoC 및 분석 이 저장소는 취약한 버전의 QEMUv2.3.0를 사용하여 CVE-2015-3456"VENOM"에 대한 재현 가능한 충돌/DoS 개념 증명을 포함합니다. 이 프로젝트는 다음을 보여줍니다: 게스트가 제어하는 가상 플로피 디스크 컨트롤러FDC에 쓰기 취약한 QEMU FDC 코드 경로 트리거 호스트 측 QEMU 프로세스 충돌 GDB로 충돌 정보 캡처 이 저장소에는 VM 탈출 또는 호스트 코드 실행 익스플로잇이 포함되어 있지 않습니다. 저장소 구조 src/...

Astra Linux – Vulnerability in Qemu

A NULL pointer dereference flaw was discovered in the floppy disk emulator of QEMU. This issue occurs when processing read/write ioport commands, especially if the selected floppy drive is not initialized using a block device. This flaw allows a privileged guest user to crash the QEMU process on...

Astra Linux – Vulnerability in Qemu

A heap buffer overflow was discovered in the floppy disk emulator of QEMU up to version 6.0.0 inclusive. This issue could occur in the fdctrltransferhandler function in the hw/block/fdc.c file, during the processing of DMA read data transfers from the floppy drive to the guest system. A privilege...

Astra Linux – Vulnerability in Linux, Linux 5.10

The drivers/block/floppy.c file in the Linux kernel before version 5.17.6 is vulnerable to a denial-of-service attack due to a concurrency issue after deallocating rawcmd in the rawcmdioctl function...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010728 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013306 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

The vulnerability of the do_floppy_init() function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the dofloppyinit function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 4 : kernel-2.6.32-431.20.3.el6 (AXSA:2014-454:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-454:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001319 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003579 advisory. In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setupformatparams division-by-zero. Two consecutive ioctls can trigger the bug...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003710 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001596 advisory. A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004159 advisory. A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001040 advisory. The rawcmdcopyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioc...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003768 advisory. In the Linux kernel before 5.2.3, setgeometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001607 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004717 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...