Lucene search
K

5231 matches found

OSV
OSV
added 2021/03/09 8:15 p.m.2 views

AZL-35149 CVE-2021-20255 affecting package qemu for versions less than 6.2.0-18

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS6.5AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2021/03/09 8:15 p.m.1 views

AZL-6829 CVE-2021-20255 affecting package qemu for versions less than 6.2.0-2

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS6.5AI score0.00228EPSS
Exploits0References1
OSV
OSV
added 2021/03/09 8:15 p.m.0 views

UBUNTU-CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS7.3AI score0.00228EPSS
Exploits0References5
Prion
Prion
added 2021/03/09 8:15 p.m.25 views

Stack overflow

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

2.1CVSS5.3AI score0.00228EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2021/03/09 7:14 p.m.28 views

CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS5.8AI score0.00228EPSS
Exploits0
Cvelist
Cvelist
added 2021/03/09 7:14 p.m.17 views

CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

6.7AI score0.00228EPSS
Exploits0References5
CVE
CVE
added 2021/03/09 7:14 p.m.221 views

CVE-2021-20255

The CVE-2021-20255 vulnerability affects the QEMU eepro100 i8255x device emulator. The root cause is a DMA reentry condition that can trigger a stack overflow via infinite recursion while processing controller commands, allowing a guest user or process to consume CPU cycles or crash the QEMU host...

5.5CVSS6.2AI score0.00228EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2021/03/09 7:14 p.m.38 views

CVE-2021-20255

A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the hos...

5.5CVSS6.7AI score0.00228EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/03/09 12:0 a.m.2 views

PT-2021-7314 · Qemu +3 · Qemu +3

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry...

8.6CVSS6.3AI score0.02126EPSS
Exploits6References230
NVD
NVD
added 2021/03/05 6:15 p.m.9 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS0.0028EPSS
Exploits1References1
OSV
OSV
added 2021/03/05 6:15 p.m.11 views

CVE-2021-28040

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

7.5CVSS6.8AI score
Exploits0References1
Prion
Prion
added 2021/03/05 6:15 p.m.14 views

Design/Logic Flaw

An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in osxml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached...

5CVSS7.5AI score0.0028EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/03/05 5:46 p.m.61 views

CVE-2021-28040

CVE-2021-28040 describes an uncontrolled recursion in OSSEC 3.6.0 due to unrestrained recursion in os_xml.c when processing a large number of opening/closing XML tags. The recursion in _ReadElem can cause a segmentation fault once unmapped memory is reached. This entry provides no exploit details...

7.5CVSS7.5AI score0.0028EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1548)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00742EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00742EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1403)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1414)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2021-1487)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00955EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1410)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.00742EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/03/05 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1466)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00742EPSS
Exploits2References2
Rows per page
Query Builder