AZL-25807 CVE-2023-1544 affecting package qemu for versions less than 6.2.0-23

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of...

QEMU 安全漏洞

QEMU is a suite of simulation processor software. The software is fast and cross-platform. QEMU suffers from a denial-of-service vulnerability, which stems from the guest driver allocating and initializing a large number of page tables to be used as descriptor rings for CQs and asynchronous event...

SUSE CVE-2016-7155

hw/scsi/vmwpvscsi.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service out-of-bounds access or infinite loop, and QEMU process crash via a crafted page count for descriptor rings...

PT-2023-33281 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.159 Description: A potential issue exists in the greth init rings function, which may lead to a skb leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2023-33094 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33426 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.302 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-33390 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue concerns a potential skb leak in the greth init rings function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-33345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.227 Description: A potential issue exists in the greth init rings function, which may lead to a skb leak. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2024-11826 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential skb leak in the greth init rings function. This function does not free the newly allocated skb when dma mapping error returns an error. To fix this,...

GSD-2022-1006860 ice: set tx_tstamps when creating new Tx rings via ethtool

ice: set txtstamps when creating new Tx rings via ethtool This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

PT-2022-35166 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the thunderbolt net functionality in the Linux Kernel, where DMA paths are enabled before rings are enabled. This could potentially lead to security vulnerabilities,...

PT-2022-35115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the creation of new Tx rings via ethtool, where tx tstamps are not set. This is an automated ID intended to aid in discovery of potential security vulnerabilities, wit...

PT-2022-35359 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.15.75 Description: The issue is related to the creation of new Tx rings via ethtool, where tx tstamps are not set. This is an automated ID intended to aid in discovery of potential security vulnerabilities. Th...

Microsoft Windows Autopatch is Now Generally Available for Enterprise Systems

Microsoft on Monday announced the general availability of a feature called Autopatch that automatically keeps Windows and Office software up-to-date on enrolled endpoints. The launch, which comes a day before Microsoft is expected to release its monthly round of security patches, is available for...

GSD-2022-1003889 rxrpc: Fix listen() setting the bar too high for the prealloc rings

rxrpc: Fix listen setting the bar too high for the prealloc rings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003767 rxrpc: Fix listen() setting the bar too high for the prealloc rings

rxrpc: Fix listen setting the bar too high for the prealloc rings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003588 rxrpc: Fix listen() setting the bar too high for the prealloc rings

rxrpc: Fix listen setting the bar too high for the prealloc rings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

Microsoft Autopatch is here…but can you use it?

Updating endpoints on a network can be a daunting task. Testing before rollout can take time. Delays to patches going live can cause all manner of headaches. Windows Autopatch aims to tackle some of these issues, and is now live for public preview. The release comes with a few caveats which youll...

Microsoft's New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. "This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost," said Lior Bela, senior...

SUSE: Security Advisory (SUSE-SU-2016:3273-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...