Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc (crlsa-2023_0099)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230099 advisory. QEMU: QXL: qxlphys2virt unsafe address translation can lead to out-of-bounds read CVE-2022-4144 Tenable has extracted the preceding description block directly from...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the qxlphys2virt function in the QEMU hardware emulation software is related to a read-off-the-boundary error in the QXL representation in QEMU. Exploiting this vulnerability may allow a malicious actor to trigger a service failure...

Out-of-bounds Read

qemu is vulnerable to Out-of-bounds Read. An out-of-bounds read flaw was found qxlphys2virt function which does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use thi...

CVE-2022-4144: Out-of-bounds Read

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use th...

CVE-2022-4144

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use th...