Поиск уязвимостей

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

A flaw was found in QEMU. The async nature of hot-unplug enables a rac ...

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

Уязвимость функции scsi_disk_reset() (hw/scsi/scsi-disk.c) эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

Уязвимость интерфейса virtio-net эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

Множественные уязвимости qemu

ALT-PU-2023-6573: package `qemu` update to version 8.1.2-alt1

Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

ELSA-2023-6980: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (MODERATE)

Moderate: qemu-kvm security update

ELSA-2024-2135: qemu-kvm security update (MODERATE)

ELSA-2024-12407: qemu-kvm security update (MODERATE)

ELSA-2024-12276: virt:kvm_utils3 security update (MODERATE)

Множественные уязвимости qemu

ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT)