PT-2026-23849

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A heap buffer overflow condition exists in QEMU. This issue was automatically discovered and reported by an AI Agent three months prior to public disclosure. Recommendations At the moment, there...

Linux Distros Unpatched Vulnerability : CVE-2016-6835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vmxnettxpktparseheaders function in hw/net/vmxnettxpkt.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service buffer...

Important: Red Hat Security Advisory: virt:av and virt-devel:av security update

An update for the virt:av and virt-devel:av modules is now available for Advanced Virtualization for RHEL 8.4.0.EUS. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

SUSE-SU-2023:3082-2 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-3301: Fixed incorrect cleanup of the vdpa/vhost-net structures if peer nic is present bsc1213414. - CVE-2023-0330: Fixed reentrancy issues in the LSI controller bsc1207205. - CVE-2023-2861: Fixed opening special files in 9pfs bsc1212968....

Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2021:5238)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:5238 advisory. - An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits tx descriptors in processtxdesc if...

ALSA-2023:0099 Moderate: virt:rhel and virt-devel:rhel security and bug fix update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

olcne security update

1.4.5-1 - Address qemu CVE-2022-26353, CVE-2021-3748...

OPENSUSE-SU-2020:0756-1 Security update for qemu

This update for qemu fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in the ipreass function of slirp bsc1170940. Non-security issues fixed: - Fixed an issue where limiting the memory bandwidth was not possible bsc1167816. - Fixed the issue that s390x cou...

CVE-2020-7211

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows...

Fedora 29 : 2:qemu (2019-88a98ce795)

CVE-2018-19364: 9pfs: use-after-free bz 1651359 - CVE-2018-19489: 9pfs: use-after-free renaming files bz 1653157 - CVE-2018-16867: usb-mtp: path traversal issue bz 1656746 - CVE-2018-16872: usb-mtp: path traversal issue bz 1659150 - CVE-2018-20191: pvrdma: uarread leads to NULL deref bz 1660315 -...

Fedora 25 : xen (2017-cdb53b04e0)

Qemu: net: mcffec: infinite loop while receiving data in mcffecreceive CVE-2016-9776 Qemu: audio: memory leakage in ac97 CVE-2017-5525 Qemu: audio: memory leakage in es1370 device CVE-2017-5526 oob access in cirrus bitblt copy XSA-208, CVE-2017-2615 Note that Tenable Network Security has extracte...