MiracleLinux 8 : virt:rhel and virt-devel:rhel (AXSA:2024-7436:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7436:01 advisory. QEMU: e1000e: heap use-after-free in e1000ewritepackettoguest CVE-2023-3019 Tenable has extracted the preceding description block directly from the...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000e: Heap-use-after-free in e1000e_receive_internal

Detailed Report: https://oss-fuzz.com/testcase?key=6436351936692224 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000e Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60800005ea58 Crash State:...

qemu:qemu-fuzz-i386-target-generic-fuzz-e1000e: Heap-use-after-free in e1000e_write_packet_to_guest

Detailed Report: https://oss-fuzz.com/testcase?key=5163636913602560 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000e Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000072fe8 Crash State:...

DEBIAN-CVE-2017-9310

QEMU aka Quick Emulator, when built with the e1000e NIC emulation support, allows local guest OS privileged users to cause a denial of service infinite loop via vectors related to setting the initial receive / transmit descriptor head TDH/RDH outside the allocated descriptor buffer...