Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-3399

Malware in sbrugna...

1.9CVSS8.5AI score0.00642EPSS
Exploits1References12
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.2 views

SUSE CVE-2020-27821

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

5.7CVSS6.5AI score0.0036EPSS
Exploits0References14
RedHat Linux
RedHat Linux
added 2021/08/10 4:14 p.m.1 views

QEMU: msix: OOB access during mmio operations may lead to DoS

An out-of-bounds access flaw was found in the Message Signalled Interrupt MSI-X device support of QEMU. This issue occurs while performing MSI-X mmio operations when a guest sent address goes beyond the mmio region. A guest user or process may use this flaw to crash the QEMU process resulting in ...

6.7CVSS7.1AI score0.00421EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2021/06/03 12:0 a.m.54 views

SUSE SLES12 Security Update : qemu (SUSE-SU-2021:1829-1)

This update for qemu fixes the following issues : Fix OOB access during mmio operations CVE-2020-13754, bsc1172382 Fix sPAPR emulator leaks the host hardware identity CVE-2019-8934, bsc1126455 Fix out-of-bounds read information disclosure in icmp6sendechoreply CVE-2020-10756, bsc1172380 Fix...

7.5CVSS6.8AI score0.05447EPSS
Exploits3References36
RedHat Linux
RedHat Linux
added 2021/02/22 3:43 p.m.1 views

QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

6CVSS6.8AI score0.0036EPSS
Exploits0References5
OSV
OSV
added 2021/02/04 11:2 a.m.4 views

OESA-2021-1012 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including one or several processors and various peripherals. It can be used to launch...

6CVSS6.6AI score0.0036EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2020/12/11 12:0 a.m.2 views

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

...

6CVSS7AI score0.0036EPSS
Exploits0
OSV
OSV
added 2020/12/08 10:15 p.m.28 views

CVE-2020-27821

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

6CVSS6.2AI score
Exploits0References4
OSV
OSV
added 2020/12/08 10:15 p.m.1 views

DEBIAN-CVE-2020-27821

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

6CVSS6.8AI score0.0036EPSS
Exploits0References1
Prion
Prion
added 2020/12/08 10:15 p.m.34 views

Out-of-bounds

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

2.1CVSS5.6AI score0.0036EPSS
Exploits0References4Affected Software2
Debian CVE
Debian CVE
added 2020/12/08 9:33 p.m.32 views

CVE-2020-27821

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting i...

6CVSS6.5AI score0.0036EPSS
Exploits0
Veracode
Veracode
added 2019/11/14 12:18 a.m.24 views

Privilege Escalation

kernel is vulnerable to privilege escalation. A local attacker with the ability to issue commands to the GPU could inadvertently lead to memory corruption and possible privilege escalation due to a flaw in the Intel graphics hardware GPU. The attacker could use the GPU blitter to perform privileg...

7.8CVSS2.9AI score0.00668EPSS
Exploits0References15Affected Software2
RedHat Linux
RedHat Linux
added 2019/11/12 9:2 p.m.0 views

hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write

A flaw was found in the Intel graphics hardware GPU, where a local attacker with the ability to issue commands to the GPU could inadvertently lead to memory corruption and possible privilege escalation. The attacker could use the GPU blitter to perform privilege MMIO operations, not limited to th...

7.8CVSS7.2AI score0.00668EPSS
Exploits0References6
NVD
NVD
added 2012/12/03 9:55 p.m.17 views

CVE-2012-3432

The handlemmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service guest OS crash via unspecified...

1.9CVSS6.1AI score0.00642EPSS
Exploits1References9
UbuntuCve
UbuntuCve
added 2012/12/03 9:55 p.m.32 views

CVE-2012-3432

The handlemmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service guest OS crash via unspecified...

1.9CVSS7.2AI score0.00642EPSS
Exploits1References2
Rows per page
Query Builder