MAL-2023-941 Malicious code in vmw-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b19932db9ddd83e47e8db2bfa9d4bb65d5d4ef19b7e632a168be191ee4cc54f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in vmw-atk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in vmw-atk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b19932db9ddd83e47e8db2bfa9d4bb65d5d4ef19b7e632a168be191ee4cc54f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-3563

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The issue is related to a double-free vulnerability in the handling of vmw buffer object objects in the vmwgfx driver. This vulnerability occurs due to the lack of validation of an...

PT-2022-35340 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.74 Description: A memory leak issue was discovered in the vmw mksstat add ioctl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20191

hw/rdma/vmw/pvrdmamain.c in QEMU does not implement a read operation such as uarread by analogy to uarwrite, which allows attackers to cause a denial of service NULL pointer dereference...

CVE-2018-20125

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20216

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20216

CVE-2018-20216 : In QEMU, an infinite loop can occur in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked and -1 is mishandled. This is the only detail provided in the initial description; no explicit exploit details, affected product versions, or mitigations are included here. ...

CVE-2018-20126

Technical details about CVE-2018-20126 are not provided in the supplied documents. No information on affected products, versions, root cause, or fixes is available here; monitor for updates.

CVE-2018-20125: NULL Pointer Dereference

hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service NULL pointer dereference or excessive memory allocation in createcqring or createqprings...

CVE-2018-20216: Unchecked Return Value

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20126

hw/rdma/vmw/pvrdmacmd.c in QEMU allows createcq and createqp memory leaks because errors are mishandled...

CVE-2018-20216

QEMU can have an infinite loop in hw/rdma/vmw/pvrdmadevring.c because return values are not checked and -1 is mishandled...

CVE-2018-20123

pvrdmarealize in hw/rdma/vmw/pvrdmamain.c in QEMU has a Memory leak after an initialisation error...

CVE-2018-20123

pvrdmarealize in hw/rdma/vmw/pvrdmamain.c in QEMU has a Memory leak after an initialisation error...

PT-2018-3507

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to the pvrdma idx ring has function in the PVRDMA emulator of QEMU, which can lead to an infinite loop due to an unreachable exit condition. This can be exploited by a...

kernel: drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

An out-of-bounds write vulnerability was found in the Linux kernel's vmwsurfacedefineioctl function, in the 'drivers/gpu/drm/vmwgfx/vmwgfxsurface.c' file. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely...