AMD Secure Encrypted Virtualization (SEV) 输入验证错误漏洞

AMD Secure Encrypted Virtualization is a software application from UltraMicroelectronics AMD. Hardware-accelerated memory encryption to protect data in use. A security vulnerability exists in AMD Secure Encrypted Virtualization SEV that stems from incorrect input validation and boundary checking,...

EulerOS Virtualization 2.9.1 : expat (EulerOS-SA-2023-1190)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Tenable Network Securi...

EulerOS Virtualization 2.10.1 : qemu (EulerOS-SA-2023-1161)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati2dblt routine whi...

EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2023-1228)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds...

EulerOS Virtualization 2.10.1 : wayland (EulerOS-SA-2023-1159)

According to the versions of the wayland package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The referen...

EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2023-1164)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent...

EulerOS Virtualization 2.9.1 : bind (EulerOS-SA-2023-1183)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. ...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2023-1147)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions before 2.8.43 may allow an...

EulerOS Virtualization 2.9.1 : rpm (EulerOS-SA-2023-1202)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...

EulerOS Virtualization 2.9.0 : dhcp (EulerOS-SA-2023-1218)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.0.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported...

EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2023-1216)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent...

EulerOS Virtualization 2.10.0 : unbound (EulerOS-SA-2023-1177)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving...

EulerOS Virtualization 2.9.1 : libtiff (EulerOS-SA-2023-1196)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a...

EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2023-1162)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance,...

EulerOS Virtualization 2.10.0 : shim (EulerOS-SA-2023-1176)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli...

EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2023-1145)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Tenable Network Securi...

EulerOS Virtualization 2.10.1 : dhcp (EulerOS-SA-2023-1144)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND...

EulerOS Virtualization 2.9.1 : mariadb-connector-c (EulerOS-SA-2023-1197)

According to the versions of the mariadb-connector-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper...

PT-2023-1488 · Amd · Amd System Management Unit +2

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified AMD System Management Unit SMU affected versions not specified AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to errors in...

PT-2023-1405 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description: The issue is related to insufficient input validation in the SEV firmware, which may allow an attacker to perform out-of-bounds memory reads within...