EUVD-2017-11791

Malware in sbrugna...

Oracle Linux 7 : qemu (ELSA-2018-4262)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4262 advisory. - net: ignore packet size greater than INTMAX Jason Wang Orabug: 28762625 CVE-2018-17963 - pcnet: fix possible buffer overflow Jason Wang Orabug:...

CVE-2017-2630

CVE-2017-2630 describes a stack buffer overflow in QEMU prior to 2.9 when processing the server response to an NBD_OPT_LIST during NBD client negotiation. A malicious NBD server could trigger the overflow, crash the QEMU NBD client, or potentially cause arbitrary code execution in the QEMU proces...