TinyXPB

TinyXPB REQUIREMENTS: A Virtual Machine or Bochs running XP SP3 XP SP0 will not work, other versions may USAGE: 1. run build.bat 2. copy floppy.img to wherever you wish to use it 3. set virtual machine / bochs to boot from floppy.img 4. Boot! EXECUTABLES: Tools\MakeImage\imagefs.exe - Commandline...

CVE-2018-7273

include include include include include include include include include include static int driveselectorint head return head 2; void fdrecalibrateint fd struct floppyrawcmd rawcmd; int tmp; root@kitploit: rawcmd.flags = FDRAWINTR; rawcmd.cmdcount = 2; // set up the command...

cve-2015-3456

与 CVE-2015-3456 相关的实验 其中包含： exploit/ 是一个“漏洞利用程序”（它只会让 QEMU 崩溃）。 mock/ 包含一个精简版的 QEMU，仅保留漏洞本身。 patch/ 包含一个用于对正在运行的 QEMU 实例进行修补的程序。其主要目的是无需调试符号，也无需磁盘上的原始可执行文件。因此，需要为此程序提供一些信息才能使其按预期工作。 所有热补丁的核心思路是修改 commandtohandler 数组，使每个命令都指向“未实现”函数。当进程被 ptrace 部分暂停（仅主线程）时，这似乎是一种修复漏洞的安全方式（只要你不关心软盘控制器不再工作）。...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM — QEMU 崩溃 PoC 与分析 此仓库包含针对 CVE-2015-3456（“VENOM”）的可重现崩溃/拒绝服务概念验证（PoC），使用易受攻击的 QEMU 版本（v2.3.0）。 该项目演示了： 客户机控制对虚拟软盘控制器（FDC）的写入 触发易受攻击的 QEMU FDC 代码路径 使宿主机端 QEMU 进程崩溃 使用 GDB 捕获崩溃信息 此仓库不 包含虚拟机逃逸或宿主机代码执行漏洞。 仓库结构 root@kitploit: src/ venom-crash.c 客户机端崩溃 PoC scripts/ run-alpine.sh 使用...

Astra Linux – Vulnerability in Qemu

A heap buffer overflow was discovered in the floppy disk emulator of QEMU up to version 6.0.0 inclusive. This issue could occur in the fdctrltransferhandler function in the hw/block/fdc.c file, during the processing of DMA read data transfers from the floppy drive to the guest system. A privilege...

Astra Linux – Vulnerability in Linux, Linux 5.10

The drivers/block/floppy.c file in the Linux kernel before version 5.17.6 is vulnerable to a denial-of-service attack due to a concurrency issue after deallocating rawcmd in the rawcmdioctl function...

Astra Linux – Vulnerability in Qemu

A NULL pointer dereference flaw was discovered in the floppy disk emulator of QEMU. This issue occurs when processing read/write ioport commands, especially if the selected floppy drive is not initialized using a block device. This flaw allows a privileged guest user to crash the QEMU process on...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010728 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013306 advisory. drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd...

The vulnerability of the do_floppy_init() function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the dofloppyinit function in the drivers/block/floppy.c module of the Linux kernel’s block devices driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

MiracleLinux 4 : kernel-2.6.32-431.20.3.el6 (AXSA:2014-454:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-454:03 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001596)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001596 advisory. A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003579 advisory. In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setupformatparams division-by-zero. Two consecutive ioctls can trigger the bug...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001319 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003710)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003710 advisory. An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003768 advisory. In the Linux kernel before 5.2.3, setgeometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001040)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001040 advisory. The rawcmdcopyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioc...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004159)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004159 advisory. A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001607)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001607 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004717)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004717 advisory. An issue was discovered in the Linux kernel 3.16 through 5.5.6. setfdc in drivers/block/floppy.c leads to a waittilready out-of-bounds read because the FDC index is...