PT-2022-28817

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-rdma. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-rdma. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28629

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.181 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-rdma. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.181 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-28669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28815

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-28731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-tcp. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-28670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-rdma. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28732

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a possible use-after-free in the transport error recovery work of nvme-rdma. The actual impact and attack plausibility have not yet been proven. Recommendations For...

Oracle Linux 8 : kvm_utils (ELSA-2022-9172)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9172 advisory. - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501 libguestfs - Document CVE-2021-4158 and CVE-2021-3947 as fixed Mark...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

AZL-8672 CVE-2021-3947 affecting package qemu for versions less than 6.2.0-2

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

UBUNTU-CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

Stack overflow

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...

CVE-2021-3947

The CVE-2021-3947 entry corresponds to a stack-buffer-overflow in QEMU’s NVME implementation, specifically nvme_changed_nslist(), where crafted input from a malicious guest can trigger out-of-bounds reads and disclose sensitive information. Multiple connected sources confirm the issue as a memory...

CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvmechangednslist where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information...