Поиск уязвимостей
Количество 24
Количество 24
BDU:2021-06306
Уязвимость эмуляции устройства UAS эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2022-7880
ALT-PU-2022-7880: package `pve-qemu` update to version 6.1.1-alt1
ALT-PU-2022-1412
ALT-PU-2022-1412: package `qemu` update to version 6.1.1-alt1
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) d ...
ALT-PU-2021-2713
ALT-PU-2021-2713: package `qemu` update to version 6.1.0-alt1
ALT-PU-2021-3363
ALT-PU-2021-3363: package `qemu` update to version 6.1.0-alt2
ALT-PU-2022-3390
ALT-PU-2022-3390: package `pve-qemu` update to version 7.1.0-alt4
GHSA-q4w6-2g7p-pr2c
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
openSUSE-SU-2021:3605-1
Security update for qemu
openSUSE-SU-2021:3604-1
Security update for qemu
openSUSE-SU-2021:1461-1
Security update for qemu
SUSE-SU-2021:3653-1
Security update for qemu
SUSE-SU-2021:3605-1
Security update for qemu
SUSE-SU-2021:3604-1
Security update for qemu
SUSE-SU-2021:3519-1
Security update for qemu
SUSE-SU-2021:3635-1
Security update for qemu
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-06306 Уязвимость эмуляции устройства UAS эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
| ALT-PU-2022-7880 ALT-PU-2022-7880: package `pve-qemu` update to version 6.1.1-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1412 ALT-PU-2022-1412: package `qemu` update to version 6.1.1-alt1 | CVSS3: 8.2 | больше 4 лет назад | |
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
 | CVSS3: 7.4 | 1% Низкий | больше 3 лет назад | |
| CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) d ... | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
| ALT-PU-2021-2713 ALT-PU-2021-2713: package `qemu` update to version 6.1.0-alt1 | CVSS3: 8.5 | около 5 лет назад | |
| ALT-PU-2021-3363 ALT-PU-2021-3363: package `qemu` update to version 6.1.0-alt2 | CVSS3: 8.5 | почти 5 лет назад | |
| ALT-PU-2022-3390 ALT-PU-2022-3390: package `pve-qemu` update to version 7.1.0-alt4 | CVSS3: 8.8 | почти 4 года назад | |
| GHSA-q4w6-2g7p-pr2c An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | больше 4 лет назад |
 | openSUSE-SU-2021:3605-1 Security update for qemu | около 5 лет назад | ||
| openSUSE-SU-2021:3604-1 Security update for qemu | около 5 лет назад | ||
| openSUSE-SU-2021:1461-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3653-1 Security update for qemu | почти 5 лет назад | ||
| SUSE-SU-2021:3605-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3604-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3519-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3635-1 Security update for qemu | почти 5 лет назад |
Уязвимостей на страницу