CVE-2020-11869

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati2dblt routine in hw/display/ati-2d.c while handling MMIO write operations through the atimmwrite callback. A malicious guest could abuse this flaw to crash the QEMU...

CVE-2020-11869

An integer overflow flaw was found in QEMU in the way it implemented the ATI VGA emulation. This flaw occurs in the ati2dblt routine while handling MMIO write operations through atimmwrite callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of servic...

openSUSE: Security Advisory for the Linux Kernel (openSUSE-SU-2019:2308-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 7 : kernel (ELSA-2019-3979)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3979 advisory. - drm drm/i915/cmdparser: Fix jump whitelist clearing Dave Airlie 1756882 1756883 CVE-2019-0155 - drm drm/i915: Lower RM timeout to avoid DSI hard hang...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-2307)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in the drivers/media/usb/b2c2/flexcop-usb.c driver...

CVE-2019-14821: Out-of-bounds Write

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvmcoalescedmmio' object, wherein write indices 'ring-first' and 'ring-last'...

DEBIAN-CVE-2017-8380

Buffer overflow in the "megasasmmiowrite" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors...

QEMU 'megasas_mmio_write()' function out-of-bounds read vulnerability

QEMU is an open source emulator software. QEMU suffers from an out-of-bounds read vulnerability in the 'megasasmmiowrite' function, which can be exploited by an attacker to cause the affected application to crash...

PT-2017-2809

Name of the Vulnerable Software and Affected Versions Qemu version 2.9.0 Description The issue is caused by a buffer overflow in the megasas mmio write function of the Qemu hardware emulator. This can be exploited by a remote attacker to have an unspecified impact via unknown vectors...

PT-2014-5003

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x Description The issue is related to the vgic distr mmio write function in the virtual guest interrupt controller GIC distributor. It allows local guest users to cause a denial of service, resulting in a NULL pointer...