Lucene search
+L

381 matches found

OSV
OSV
•added 2022/04/24 8:38 p.m.•18 views

GSD-2022-1001004 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)

mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-30447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-29277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the mmmremap.c file in the Linux Kernel, where a pointless invalidate range start/end on mremap occurs when old size=0. The actual impact and attack plausibility have n...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30741

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30244

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•1 views

PT-2022-29622

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the mmmremap.c file in the Linux Kernel, specifically with the mremap function when old size=0. The actual impact and potential for attack have not been proven yet...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/08 12:00 a.m.•17 views

PT-2025-8005 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resolved issue in the Linux kernel involves the mremap syscall. When this syscall is called with old size=0 and ends up in move page tables, it unnecessarily calls invalidate range...

4.6CVSS5.1AI score0.00253EPSS
SaveExploits0References22
Mend
Mend
•added 2022/03/25 6:02 p.m.•3 views

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

8.2CVSS0.00386EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2022/03/25 6:02 p.m.•85 views

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

6.5CVSS6.7AI score0.00386EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/25 12:00 a.m.•3 views

CVE-2021-3582: Improper Restriction of Operations within the Bounds of a Memory Buffer

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits1References3
OSV
OSV
•added 2021/08/02 10:56 a.m.•11 views

OPENSUSE-SU-2021:2591-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure tftp bsc1187366 - CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure bootp bsc118736...

6.5CVSS5.6AI score0.00633EPSS
SaveExploits3References21
OpenVAS
OpenVAS
•added 2021/07/28 12:00 a.m.•36 views

SUSE: Security Advisory (SUSE-SU-2021:2474-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.2AI score0.00461EPSS
SaveExploits2References2
OSV
OSV
•added 2021/07/21 12:01 p.m.•7 views

SUSE-SU-2021:2442-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3582: Fix possible mremap overflow in the pvrdma bsc1187499 - CVE-2021-3607: Ensure correct input on ring init bsc1187539 - CVE-2021-3608: Fix the ring init error flow bsc1187538 - CVE-2021-3611: Fix intel-hda segmentation fault due to...

6.5CVSS6.6AI score0.00461EPSS
SaveExploits2References9
OPENSUSE Linux
OPENSUSE Linux
•added 2021/07/21 12:00 a.m.•85 views

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2442-1 Rating: important References: 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3607 CVE-2021-3608 CVE-2021-3611 CVSS scores: CVE-2021-3582 SUSE: 3.2...

5CVSS7.5AI score0.00461EPSS
SaveExploits2References4
UbuntuCve
UbuntuCve
•added 2021/06/18 12:00 a.m.•43 views

CVE-2021-3582

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMACMDCREATEMR" command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this...

6.5CVSS6.7AI score0.00386EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
•added 2020/09/25 7:00 a.m.•7 views

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

...

7.8CVSS8.2AI score0.00992EPSS
SaveExploits1
OSV
OSV
•added 2020/09/03 4:41 p.m.•19 views

USN-4483-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Chuhong Yuan discovered that go7007 USB audio device driver in the Linux kernel did not properly deallocate memory in some failure conditions. A physically proximate attacker could use this to cause a denial of service memory exhaustion. CVE-2019-20810 Fan Yang discovered that the mremap...

7.8CVSS6.3AI score0.01004EPSS
SaveExploits4References14
Rows per page
Query Builder