Поиск уязвимостей

Moderate: virt:rhel and virt-devel:rhel security and enhancement update

ELSA-2024-2962: virt:ol and virt-devel:rhel security and enhancement update (MODERATE)

Moderate: qemu-kvm security update

ELSA-2024-2135: qemu-kvm security update (MODERATE)

A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memory relative to an allocated buffer can be disclosed.

Уязвимость функции nvme_fdp_events() виртуального устройства NVMe эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

ELSA-2023-5094: qemu-kvm security and bug fix update (IMPORTANT)

Уязвимость эмулятора аппаратного обеспечения QEMU, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании

Множественные уязвимости qemu

Уязвимость qemu

Important: virt:rhel and virt-devel:rhel security and bug fix update

ELSA-2023-5264: virt:ol and virt-devel:ol security and bug fix update (IMPORTANT)

ALT-PU-2024-1248: package `qemu` update to version 8.2.0-alt1

ALT-PU-2024-6235: package `qemu` update to version 8.2.2-alt0.p10

ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT)