Lucene search
+L

54 matches found

Debian CVE
Debian CVE
added 2022/03/30 4:03 p.m.72 views

CVE-2022-0998

An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhostvdpaconfigvalidate function. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.9AI score0.0037EPSS
SaveExploits0
CVE
CVE
added 2022/03/30 4:03 p.m.134 views

CVE-2022-0998

CVE-2022-0998 details an integer overflow in the Linux kernel's virtio device driver, specifically in vhost_vdpa_config_validate, permitting a local user to crash the system or potentially escalate privileges. Connected advisories confirm this flaw in the kernel virtio path and reference related ...

7.8CVSS7.5AI score0.0037EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/07/02 10:15 p.m.29 views

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

7.5CVSS0.00961EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/02 10:15 p.m.13 views

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

7.5CVSS5.5AI score0.00961EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/02 10:15 p.m.5 views

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

7.5CVSS6AI score0.00961EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/07/02 9:24 p.m.34 views

CVE-2021-36144

The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/.c...

7.7AI score0.00961EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/07/02 12:00 a.m.11 views

ACRN 资源管理错误漏洞

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

7.5CVSS5.6AI score0.00961EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.10 views

The vulnerability of the virtio_dev_rx_batch_packed function in the set of libraries and drivers for fast packet processing in DPDK allows a attacker to trigger a service failure.

The vulnerability of the virtiodevrxbatchpacked function in the set of libraries and drivers for fast packet processing in DPDK is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.7CVSS7.3AI score0.02213EPSS
SaveExploits0References9Affected Software7
OSV
OSV
added 2020/05/20 2:15 p.m.3 views

DEBIAN-CVE-2020-10725

A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity chec...

7.7CVSS7.3AI score0.02213EPSS
SaveExploits0References1
NVD
NVD
added 2019/12/30 10:15 p.m.22 views

CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

7.8CVSS7.6AI score0.00505EPSS
SaveExploits1References9
OSV
OSV
added 2019/12/30 10:15 p.m.8 views

CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

7.8CVSS7.9AI score
SaveExploits0References17
UbuntuCve
UbuntuCve
added 2019/12/30 10:15 p.m.22 views

CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

7.8CVSS7AI score0.00505EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2019/12/30 9:47 p.m.37 views

CVE-2013-2016

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

7.8CVSS7.4AI score0.00505EPSS
SaveExploits1
OSV
OSV
added 2013/10/11 10:55 p.m.10 views

CVE-2013-4377

Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service daemon crash by "hot-unplugging" a virtio device...

5.9AI score
SaveExploits0References5
Rows per page
Query Builder