9 matches found
CVE-2021-36143
ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...
CVE-2021-36143: NULL Pointer Dereference
ACRN before 2.5 has a hw/pci/virtio/virtio.c vqendchains NULL Pointer Dereference...
CVE-2020-28346: NULL Pointer Dereference
ACRN through 2.2 has a devicemodel/hw/pci/virtio/virtio.c NULL Pointer Dereference...
PT-2016-7319
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows local guest OS administrators to cause a denial of service, resulting in a NULL pointer dereference and QEMU process crash. This is achieved by providing a large I/O descriptor...
CVE-2016-5403: Uncontrolled Resource Consumption
The virtqueuepop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service memory consumption and QEMU process crash by submitting requests without waiting for completion...
CVE-2015-7295: Improper Restriction of Operations within the Bounds of a Memory Buffer
hw/virtio/virtio.c in the Virtual Network Device virtio-net support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service guest network consumption via a flood of jumbo frames on the 1 tuntap or 2 macvtap interface...
CVE-2014-0182
Heap-based buffer overflow in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image...