qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-net-pci-slirp: Heap-use-after-free in iov_from_buf_full

Detailed Report: https://oss-fuzz.com/testcase?key=6249372784394240 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-net-pci-slirp Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address: 0x6250001f700a Cra...

QEMU DoS

The vulnerability of the slirpsmb function in the net/slirp.c component of the QEMU hardware emulator is related to errors in the code. Exploiting this vulnerability allows a local attacker to trigger a service failure using a specially crafted file...

QEMU 'net/slirp.c' Insecure Temporary File Creation Vulnerability

QEMU is an open source emulator software. QEMU version 2.3.0, a security vulnerability exists in the implementation of /net/slirp.c, which can be exploited by an attacker with local access rights to perform a symbolic link attack and overwrite arbitrary files in the context of the affected...