Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/09/04 3:54 p.m.•38 views

CVE-2026-80836 crypto: virtio - bound the akcipher result length

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtiocryptodataqakciphercallback sets the result length from the device-reported response length without bounding it to the destination buffer, which was allocated for the origin...

0.00209EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•45 views

EulerOS Virtualization 2.11.0 : qemu (EulerOS-SA-2023-3082)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the 9p passthrough filesystem 9pfs implementation in QEMU. The 9pfs server did not prohibit opening special file...

7.5CVSS6.8AI score0.01891EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2023/10/09 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-2906)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.01606EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/09/22 12:00 a.m.•52 views

Oracle Linux 7 : qemu (ELSA-2023-12834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12834 advisory. - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in...

6.5CVSS7AI score0.00259EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/08/03 12:00 a.m.•4 views

QEMU 缓冲区错误漏洞

QEMU is a suite of simulation processor software. The software is fast and cross-platform. Qemu suffers from a buffer overflow vulnerability that stems from the fact that the values of srclen and dstlen are not checked in virtiocryptosymophelper, and a heap buffer overflow may occur when processi...

6.5CVSS8AI score0.00233EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•1 views

CVE-2023-3180: Heap-based Buffer Overflow

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...

6.5CVSS6.8AI score0.00233EPSS
SaveExploits0References3
Rows per page
Query Builder