RHEL 7 : qemu-kvm (RHSA-2015:1793)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fr...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:1479-1)

xen was updated to fix the following security issues : - CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model bsc939712, XSA-140 - CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol bsc939709, XSA-139 - CVE-2015-2751: Certain domctl operations could have be...

Fedora 23 : qemu-2.4.0-2.fc23 (2015-14783)

CVE-2015-5225: heap memory corruption in vncrefreshserversurface bz 1255899 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2015-6581

Double free vulnerability in the opjj2kcopydefaulttcpandcreatetcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption by triggering a...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

Debian: Security Advisory (DSA-3348-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Citrix XenServer QEMU RTL8139 Guest Network Device Information Disclosure (CTX201717)

The version of Citrix XenServer running on the remote host is affected by an information disclosure vulnerability due to improper validation of user-supplied input in the C+ mode offload emulation of the RTL8139 network card device model in QEMU. A remote attacker can exploit this to read process...

Qemu: rtl8139 uninitialized heap memory information leakage to guest (XSA-140)

An information leak flaw was found in the way QEMU's RTL8139 emulation implementation processed network packets under RTL8139 controller's C+ mode of operation. An unprivileged guest user could use this flaw to read up to 65 KB of uninitialized QEMU heap memory...

SUSE SLES11 Security Update : xen (SUSE-SU-2015:1421-1)

Xen was updated to fix the following security issues : - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM bsc938344 - CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model XSA-140, bsc939712 Note that Tenable Network Security has extracted the preceding...

SUSE SLES11 Security Update : xen (SUSE-SU-2015:1408-1)

This security update of Xen fixes the following issues : - bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 - bsc938344: qemu,kvm,xen: host code execution via IDE subsystem CD-ROM CVE-2015-5154 Note that Tenable Network Security has extracted the...

vlc -- arbitrary pointer dereference vulnerability

oCERT reports: The stable VLC version suffers from an arbitrary pointer dereference vulnerability. The vulnerability affects the 3GP file format parser, insufficient restrictions on a writable buffer can be exploited to execute arbitrary code via the heap memory. A specific 3GP file can be crafte...

FreeBSD : freexl -- integer overflow (a59e263a-45cd-11e5-adde-14dae9d210b8)

Stefan Cornelius reports : There's an integer overflow in the allocatecells function when trying to allocate the memory for worksheet with specially crafted row/column dimensions. This can be exploited to cause a heap memory corruption. The most likely outcome of this is a crash when trying to...

SUSE SLED11 / SLES11 Security Update : xen (SUSE-SU-2015:1404-1)

This security update of Xen fixes the following issues : - bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 - bsc939709 XSA-139: Use after free in QEMU/Xen block unplug protocol CVE-2015-5166 Note that Tenable Network Security has extracted the...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1384-1)

This security update of Xen fixes the following issues : - bsc939712 XSA-140: QEMU leak of uninitialized heap memory in rtl8139 device model CVE-2015-5165 - bsc939709 XSA-139: Use after free in QEMU/Xen block unplug protocol CVE-2015-5166 Note that Tenable Network Security has extracted the...

qemu -- buffer overflow vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver support is vulnerable to a buffer overflow flaw leading to a heap memory corruption issue. It could occur while refreshing the server display surface via routine vncrefreshserversurface. A...

CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...

DEBIAN-CVE-2015-5165

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors...