EUVD-2022-35183

Malicious code in bioql PyPI...

Denial Of Service (DoS)

qemu is vulnerable to denial of service. The vulnerability exists due to the device to trigger MMIO handlers which allows an attacker to crash the application via malicious input...

CVE-2022-2962

A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn't check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possib...