Поиск уязвимостей
Количество 57
Количество 57
BDU:2023-04834
Уязвимость компонента lsi53c895a.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2023-2861
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
CVE-2023-2861
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
CVE-2023-2861
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
CVE-2023-2861
CVE-2023-2861
A flaw was found in the 9p passthrough filesystem (9pfs) implementatio ...
ALT-PU-2024-6235
ALT-PU-2024-6235: package `qemu` update to version 8.2.2-alt0.p10
ALT-PU-2024-3359
ALT-PU-2024-3359: package `qemu` update to version 8.2.1-alt1
SUSE-SU-2024:1395-1
Security update for qemu
SUSE-SU-2023:4056-1
Security update for qemu
GHSA-6mxq-x623-25h9
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.
BDU:2024-04483
Уязвимость файловой системы сквозного доступа 9p (9pfs) эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю обойти существующую политику ограничения доступа
SUSE-SU-2024:2977-1
Security update for qemu
CVE-2023-42467
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
CVE-2023-42467
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
CVE-2023-42467
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
CVE-2023-42467
CVE-2023-42467
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset ...
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-04834 Уязвимость компонента lsi53c895a.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6 | 0% Низкий | почти 4 года назад |
 | CVE-2023-2861 A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder. | CVSS3: 7.1 | 0% Низкий | почти 3 года назад |
 | CVE-2023-2861 A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder. | CVSS3: 6 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-2861 A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder. | CVSS3: 7.1 | 0% Низкий | почти 3 года назад |
 | CVSS3: 7.1 | 0% Низкий | около 2 лет назад | |
| CVE-2023-2861 A flaw was found in the 9p passthrough filesystem (9pfs) implementatio ... | CVSS3: 7.1 | 0% Низкий | почти 3 года назад |
| ALT-PU-2024-6235 ALT-PU-2024-6235: package `qemu` update to version 8.2.2-alt0.p10 | CVSS3: 8.8 | больше 2 лет назад | |
| ALT-PU-2024-3359 ALT-PU-2024-3359: package `qemu` update to version 8.2.1-alt1 | CVSS3: 6.5 | больше 2 лет назад | |
 | SUSE-SU-2024:1395-1 Security update for qemu | больше 2 лет назад | ||
| SUSE-SU-2023:4056-1 Security update for qemu | около 3 лет назад | ||
| GHSA-6mxq-x623-25h9 A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder. | CVSS3: 6 | 0% Низкий | почти 3 года назад |
| BDU:2024-04483 Уязвимость файловой системы сквозного доступа 9p (9pfs) эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю обойти существующую политику ограничения доступа | CVSS3: 7.1 | 0% Низкий | почти 3 года назад |
| SUSE-SU-2024:2977-1 Security update for qemu | около 2 лет назад | ||
| CVE-2023-42467 QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| CVE-2023-42467 QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately. | CVSS3: 2.3 | 0% Низкий | около 3 лет назад |
| CVE-2023-42467 QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| CVSS3: 5.5 | 0% Низкий | около 2 лет назад | |
| CVE-2023-42467 QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset ... | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
| CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу