Количество 56
Количество 56
CVE-2021-4207
CVE-2021-4207
A flaw was found in the QXL display device emulation in QEMU. A double ...
GHSA-pg89-46xq-98vv
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
ELSA-2022-9668
ELSA-2022-9668: libvirt libvirt-python security update (IMPORTANT)
GHSA-9p8r-v33g-4939
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.
BDU:2022-03597
Уязвимость функции qxl_cursor() эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю выполнить произвольный код
SUSE-SU-2022:0128-1
Security update for libvirt
SUSE-SU-2022:0045-2
Security update for libvirt
SUSE-SU-2022:0045-1
Security update for libvirt
SUSE-SU-2022:0042-1
Security update for libvirt
SUSE-SU-2022:0041-1
Security update for libvirt
SUSE-SU-2022:0032-1
Security update for libvirt
SUSE-SU-2022:0031-1
Security update for libvirt
SUSE-SU-2023:3015-1
Security update for qemu
RLSA-2022:1759
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
ELSA-2022-1759
ELSA-2022-1759: virt:ol and virt-devel:ol security, bug fix, and enhancement update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVSS3: 8.2 | 0% Низкий | 10 месяцев назад | |
| CVE-2021-4207 A flaw was found in the QXL display device emulation in QEMU. A double ... | CVSS3: 8.2 | 0% Низкий | около 3 лет назад |
| GHSA-pg89-46xq-98vv A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash. | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| ELSA-2022-9668 ELSA-2022-9668: libvirt libvirt-python security update (IMPORTANT) | почти 3 года назад | ||
| GHSA-9p8r-v33g-4939 A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. | CVSS3: 8.8 | 0% Низкий | около 3 лет назад |
 | BDU:2022-03597 Уязвимость функции qxl_cursor() эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | около 3 лет назад |
 | SUSE-SU-2022:0128-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0045-2 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0045-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0042-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0041-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0032-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2022:0031-1 Security update for libvirt | больше 3 лет назад | ||
| SUSE-SU-2023:3015-1 Security update for qemu | почти 2 года назад | ||
 | RLSA-2022:1759 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update | около 3 лет назад | ||
| ELSA-2022-1759 ELSA-2022-1759: virt:ol and virt-devel:ol security, bug fix, and enhancement update (MODERATE) | около 3 лет назад |
Уязвимостей на страницу