Lucene search
K

35 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.4 views

Astra Linux - уязвимость в qemu

A potential stack overflow issue due to an infinite loop was identified in various NIC emulators of QEMU, in versions up to and including 5.2.0. The issue occurs in the loopback mode of a NIC, where reentrant DMA checks are bypassed. A guest user/process may exploit this flaw to consume CPU cycle...

6CVSS6.8AI score0.00006EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2025/11/05 9:2 a.m.4 views

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

...

6.2CVSS7AI score0.00038EPSS
Exploits0
OSV
OSV
added 2025/10/31 10:15 p.m.2 views

DEBIAN-CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS7.7AI score0.00038EPSS
Exploits0References1
NVD
NVD
added 2025/10/31 10:15 p.m.3 views

CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS0.00038EPSS
Exploits0References3
OSV
OSV
added 2025/10/31 10:15 p.m.2 views

UBUNTU-CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS6.2AI score0.00038EPSS
Exploits0References5
CVE
CVE
added 2025/10/31 9:15 p.m.12 views

CVE-2025-12464

CVE-2025-12464 affects the QEMU e1000 network device. The root cause is a stack-based buffer overflow in the e1000_receive_iov path when processing short frames in loopback mode after padding logic was moved to net core. This can crash the QEMU host process (DoS). Public docs show fixes via SUSE/...

6.2CVSS6.9AI score0.00038EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/31 9:15 p.m.5 views

CVE-2025-12464 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS0.00038EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/31 9:15 p.m.2 views

CVE-2025-12464 Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS6.9AI score0.00038EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/31 12:0 a.m.2 views

PT-2025-44674

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A stack-based buffer overflow exists in the QEMU e1000 network device. The issue is due to the device’s receive code still processing short frames in loopback mode, despite the padding code bein...

7.7CVSS6.9AI score0.00145EPSS
Exploits0References44
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-16701

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00068EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/05 6:12 a.m.4 views

CVE-2025-27031

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed...

7.8CVSS7.4AI score0.00068EPSS
Exploits0References1
NVD
NVD
added 2025/06/03 6:15 a.m.9 views

CVE-2025-27031

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed...

7.8CVSS0.00068EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/03 5:53 a.m.11 views

CVE-2025-27031 Use After Free in Bluetooth HOST

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed...

7.8CVSS0.00068EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/02/27 3:5 a.m.2 views

SUSE CVE-2022-49504

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Inhibit aborts if external loopback plug is inserted After running a short external loopback test, when the external loopback is removed and a normal cable inserted that is directly connected to a target device, the...

5.5CVSS7.8AI score0.00012EPSS
Exploits0References10
OSV
OSV
added 2025/02/26 7:1 a.m.2 views

DEBIAN-CVE-2022-49504

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Inhibit aborts if external loopback plug is inserted After running a short external loopback test, when the external loopback is removed and a normal cable inserted that is directly connected to a target device, the...

5.5CVSS5.4AI score0.00012EPSS
Exploits0References1
OSV
OSV
added 2025/02/26 7:1 a.m.1 views

UBUNTU-CVE-2022-49504

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Inhibit aborts if external loopback plug is inserted After running a short external loopback test, when the external loopback is removed and a normal cable inserted that is directly connected to a target device, the...

5.5CVSS6.1AI score0.00012EPSS
Exploits0References5
OSV
OSV
added 2025/02/26 2:13 a.m.7 views

CVE-2022-49504 scsi: lpfc: Inhibit aborts if external loopback plug is inserted

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Inhibit aborts if external loopback plug is inserted After running a short external loopback test, when the external loopback is removed and a normal cable inserted that is directly connected to a target device, the...

5.5CVSS5.2AI score0.00012EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:49 a.m.4 views

SUSE CVE-2021-3416

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU...

3.2CVSS6.9AI score0.00006EPSS
Exploits0References22
RedHat Linux
RedHat Linux
added 2021/08/10 4:14 p.m.1 views

QEMU: net: Infinite loop in loopback mode may lead to stack overflow

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS...

6CVSS6.8AI score0.00006EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2021/03/26 7:0 a.m.3 views

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.

...

6CVSS7AI score0.00006EPSS
Exploits0
Rows per page
Query Builder