QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that originates from a boundary error in the virglcmdgetcapset function of...

PT-2021-28551

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.2 Description The issue is related to the vhost-vdpa component, specifically with the vm flags for virtqueue doorbell mapping. The actual impact and attack plausibility have not yet been proven...

PT-2021-24631

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.35 Description A potential security issue has been identified in the Linux Kernel, related to the vhost-vdpa component. The issue concerns the vm flags for virtqueue doorbell mapping. Although the actua...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A security vulnerability exists in QEMU. The vulnerability stems from a memory leak in vhost-user-gpu/vhost-user-gpu.c. The vulnerability is...

PT-2021-28625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the vhost-vdpa component, specifically with the vm flags for virtqueue doorbell mapping. The actual impact and attack plausibility have not yet been proven...

PT-2021-28620

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description The issue is related to the vhost-vdpa component, specifically with the vm flags for virtqueue doorbell mapping. The actual impact and attack plausibility have not yet been proven...

PT-2021-24557

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.12.2 Description: The issue is related to the vhost-vdpa component, specifically with the vm flags for virtqueue doorbell mapping. The actual impact and attack plausibility have not yet been proven...

QEMU 信息泄露漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from an information disclosure vulnerability. The vulnerability stems from an uninitialized memory leak in the virglcmdgetcapsetin...

PT-2021-24626

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.35 Description A potential security issue has been identified in the Linux Kernel, related to the vhost-vdpa component. The issue concerns the vm flags for virtqueue doorbell mapping. The actual impact...

PT-2021-24593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.11.19 Description A potential security issue was identified in the Linux Kernel, related to the vhost-vdpa component. The issue concerns the vm flags for virtqueue doorbell mapping. The actual impact and...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. A use-after-free in drivers/vhost/vdpa.c as v-configctx has an invalid value upon re-opening a character device...

CVE-2021-3546

An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU. The flaw occurs while processing the 'VIRTIOGPUCMDGETCAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of...

CVE-2021-3544

Several memory leaks were found in the virtio vhost-user GPU device vhost-user-gpu of QEMU. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory i.e., free after effective lifetime...

CVE-2021-3545

An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memo...

PT-2021-5462

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description The issue is related to an out-of-bounds write vulnerability in the virtio vhost-user GPU device of QEMU. This vulnerability occurs while processing the VIRTIO GPU CMD GET CAPSET command from t...

PT-2021-5460

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description The issue is related to several memory leaks found in the virtio vhost-user GPU device of QEMU. These leaks exist in the contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl...

PT-2021-5459

Name of the Vulnerable Software and Affected Versions QEMU versions up to and including 6.0 Description An information disclosure issue exists in the virtio vhost-user GPU device of QEMU, specifically in the virgl cmd get capset info function in contrib/vhost-user-gpu/virgl.c. This issue could...

dpdk: librte_vhost Malicious guest could cause segfault by sending invalid Virtio descriptor

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity chec...

SUSE: Security Advisory (SUSE-SU-2019:2613-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel post-release reuse vulnerability (CNVD-2021-24270)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in drivers/vhost/vdpa.c in Linux kernel versions prior to 5.11.9. The...