Количество 13
Количество 13

BDU:2024-03245
Уязвимость функции esp_do_nodma файла hw/scsi/esp.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVE-2024-24474
CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overf ...

ROS-20240423-09
Уязвимость qemu
GHSA-v4q2-79g6-j728
Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component.

SUSE-SU-2024:1394-1
Security update for qemu

SUSE-SU-2024:1103-1
Security update for qemu
ELSA-2024-12407
ELSA-2024-12407: qemu-kvm security update (MODERATE)
ELSA-2024-12276
ELSA-2024-12276: virt:kvm_utils3 security update (MODERATE)
ELSA-2024-12605
ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | BDU:2024-03245 Уязвимость функции esp_do_nodma файла hw/scsi/esp.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.2 | 0% Низкий | больше 1 года назад |
![]() | CVE-2024-24474 QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
![]() | CVE-2024-24474 QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
![]() | CVE-2024-24474 QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
![]() | CVSS3: 8.8 | 0% Низкий | 9 месяцев назад | |
CVE-2024-24474 QEMU before 8.2.0 has an integer underflow, and resultant buffer overf ... | CVSS3: 8.8 | 0% Низкий | больше 1 года назад | |
![]() | ROS-20240423-09 Уязвимость qemu | CVSS3: 8.2 | 0% Низкий | около 1 года назад |
GHSA-v4q2-79g6-j728 Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component. | CVSS3: 8.8 | 0% Низкий | больше 1 года назад | |
![]() | SUSE-SU-2024:1394-1 Security update for qemu | около 1 года назад | ||
![]() | SUSE-SU-2024:1103-1 Security update for qemu | около 1 года назад | ||
ELSA-2024-12407 ELSA-2024-12407: qemu-kvm security update (MODERATE) | около 1 года назад | |||
ELSA-2024-12276 ELSA-2024-12276: virt:kvm_utils3 security update (MODERATE) | около 1 года назад | |||
ELSA-2024-12605 ELSA-2024-12605: virt:kvm_utils2 security update (IMPORTANT) | 10 месяцев назад |
Уязвимостей на страницу