CVE-2018-20124

hw/rdma/rdmabackend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large numsge value...

CVE-2018-20191

hw/rdma/vmw/pvrdmamain.c in QEMU does not implement a read operation such as uarread by analogy to uarwrite, which allows attackers to cause a denial of service NULL pointer dereference...

CVE-2018-20216

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20125

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20216

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20216

CVE-2018-20216 : In QEMU, an infinite loop can occur in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked and -1 is mishandled. This is the only detail provided in the initial description; no explicit exploit details, affected product versions, or mitigations are included here. ...

CVE-2018-20124: Out-of-bounds Read

hw/rdma/rdmabackend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large numsge value...

CVE-2018-20216: Unchecked Return Value

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20125: NULL Pointer Dereference

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20216

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

DEBIAN-CVE-2018-20123

pvrdmarealize in hw/rdma/vmw/pvrdmamain.c in QEMU has a Memory leak after an initialisation error...

CVE-2018-20123

pvrdmarealize in hw/rdma/vmw/pvrdmamain.c in QEMU has a Memory leak after an initialisation error...

CVE-2018-20123

pvrdmarealize in hw/rdma/vmw/pvrdmamain.c in QEMU has a Memory leak after an initialisation error...

openSUSE Security Update : the Linux Kernel (openSUSE-2018-1549)

The openSUSE Leap 42.3 kernel was updated to 4.4.165-81.1 to receive various bugfixes. The following non-security bugs were fixed : - 9p locks: fix glock.clientid leak in dolock bnc1012382. - 9p: clear dangling pointers in p9statfree bnc1012382. - ACPI / LPSS: Add alternative ACPI HIDs for Cherry...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.165-81.1 to receive various bugfixes. The following non-security bugs were fixed: - 9p locks: fix glock.clientid leak in dolock bnc1012382. - 9p: clear dangling pointers in p9statfree bnc1012382. - ACPI / LPSS: Add alternative ACPI HIDs for Cherry...

PT-2018-3507

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to the pvrdma idx ring has function in the PVRDMA emulator of QEMU, which can lead to an infinite loop due to an unreachable exit condition. This can be exploited by a...