Количество 14
Количество 14
GHSA-9627-hqj3-f64h
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

CVE-2023-5088
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

CVE-2023-5088
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

CVE-2023-5088
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

CVE-2023-5088
CVE-2023-5088
A bug in QEMU could cause a guest I/O operation otherwise addressed to ...

BDU:2023-07853
Уязвимость функции ide_dma_cb() эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании

ROS-20240401-01
Множественные уязвимости qemu
ELSA-2024-2962
ELSA-2024-2962: virt:ol and virt-devel:rhel security and enhancement update (MODERATE)

RLSA-2024:2135
Moderate: qemu-kvm security update
ELSA-2024-2135
ELSA-2024-2135: qemu-kvm security update (MODERATE)
ELSA-2024-12407
ELSA-2024-12407: qemu-kvm security update (MODERATE)
ELSA-2024-12276
ELSA-2024-12276: virt:kvm_utils3 security update (MODERATE)
ELSA-2024-12605
ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
GHSA-9627-hqj3-f64h A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot. | CVSS3: 6.4 | 0% Низкий | больше 1 года назад | |
![]() | CVE-2023-5088 A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot. | CVSS3: 6.4 | 0% Низкий | больше 1 года назад |
![]() | CVE-2023-5088 A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot. | CVSS3: 6.4 | 0% Низкий | почти 2 года назад |
![]() | CVE-2023-5088 A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor to read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot. | CVSS3: 6.4 | 0% Низкий | больше 1 года назад |
![]() | CVSS3: 7 | 0% Низкий | 3 месяца назад | |
CVE-2023-5088 A bug in QEMU could cause a guest I/O operation otherwise addressed to ... | CVSS3: 6.4 | 0% Низкий | больше 1 года назад | |
![]() | BDU:2023-07853 Уязвимость функции ide_dma_cb() эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных или вызвать отказ в обслуживании | CVSS3: 6.4 | 0% Низкий | почти 2 года назад |
![]() | ROS-20240401-01 Множественные уязвимости qemu | CVSS3: 10 | около 1 года назад | |
ELSA-2024-2962 ELSA-2024-2962: virt:ol and virt-devel:rhel security and enhancement update (MODERATE) | около 1 года назад | |||
![]() | RLSA-2024:2135 Moderate: qemu-kvm security update | около 1 года назад | ||
ELSA-2024-2135 ELSA-2024-2135: qemu-kvm security update (MODERATE) | около 1 года назад | |||
ELSA-2024-12407 ELSA-2024-12407: qemu-kvm security update (MODERATE) | около 1 года назад | |||
ELSA-2024-12276 ELSA-2024-12276: virt:kvm_utils3 security update (MODERATE) | около 1 года назад | |||
ELSA-2024-12605 ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT) | 10 месяцев назад |
Уязвимостей на страницу