CVE-2021-3930

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in modesensepage if the 'page' argument was set to MODEPAGEALLS 0x3f. A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service conditio...

ALSA-2021:5238 Low: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

qemu:qemu-fuzz-i386-target-generic-fuzz-am53c974: Global-buffer-overflow in mode_sense_page

Detailed Report: https://oss-fuzz.com/testcase?key=5772395625971712 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-am53c974 Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x55cbba99ac3c Crash State:...

qemu:qemu-fuzz-i386-target-generic-fuzz-megaraid: Global-buffer-overflow in mode_sense_page

Detailed Report: https://oss-fuzz.com/testcase?key=5752860064219136 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-megaraid Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x559c75ba1c5c Crash State:...

OSV-2021-276 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30219 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

qemu:qemu-fuzz-i386-target-generic-fuzz-megaraid: Global-buffer-overflow in mode_sense_page

Detailed Report: https://oss-fuzz.com/testcase?key=5311643322023936 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-megaraid Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x55a9ebdcccbc Crash State:...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-scsi: Global-buffer-overflow in mode_sense_page

Detailed Report: https://oss-fuzz.com/testcase?key=6221343116492800 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-scsi Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x55f4a6068fbc Crash Stat...