Поиск уязвимостей
Количество 24
Количество 24
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
CVE-2021-3713
CVE-2021-3713
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) d ...
GHSA-q4w6-2g7p-pr2c
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.
BDU:2021-06306
Уязвимость эмуляции устройства UAS эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
openSUSE-SU-2021:3605-1
Security update for qemu
openSUSE-SU-2021:3604-1
Security update for qemu
openSUSE-SU-2021:1461-1
Security update for qemu
SUSE-SU-2021:3653-1
Security update for qemu
SUSE-SU-2021:3605-1
Security update for qemu
SUSE-SU-2021:3604-1
Security update for qemu
SUSE-SU-2021:3519-1
Security update for qemu
SUSE-SU-2021:3635-1
Security update for qemu
SUSE-SU-2021:3614-1
Security update for qemu
SUSE-SU-2021:3613-1
Security update for qemu
ELSA-2021-9638
ELSA-2021-9638: qemu security update (IMPORTANT)
ALT-PU-2022-7880
ALT-PU-2022-7880: package `pve-qemu` update to version 6.1.1-alt1
ALT-PU-2022-1412
ALT-PU-2022-1412: package `qemu` update to version 6.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.8 | 1% Низкий | около 5 лет назад |
 | CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
 | CVSS3: 7.4 | 1% Низкий | больше 3 лет назад | |
| CVE-2021-3713 An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) d ... | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
| GHSA-q4w6-2g7p-pr2c An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host. | CVSS3: 7.4 | 1% Низкий | больше 4 лет назад |
 | BDU:2021-06306 Уязвимость эмуляции устройства UAS эмулятора аппаратного обеспечения QEMU, связанная с записью за границами буфера, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.4 | 1% Низкий | около 5 лет назад |
 | openSUSE-SU-2021:3605-1 Security update for qemu | около 5 лет назад | ||
| openSUSE-SU-2021:3604-1 Security update for qemu | около 5 лет назад | ||
| openSUSE-SU-2021:1461-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3653-1 Security update for qemu | почти 5 лет назад | ||
| SUSE-SU-2021:3605-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3604-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3519-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3635-1 Security update for qemu | почти 5 лет назад | ||
| SUSE-SU-2021:3614-1 Security update for qemu | около 5 лет назад | ||
| SUSE-SU-2021:3613-1 Security update for qemu | около 5 лет назад | ||
| ELSA-2021-9638 ELSA-2021-9638: qemu security update (IMPORTANT) | почти 5 лет назад | ||
| ALT-PU-2022-7880 ALT-PU-2022-7880: package `pve-qemu` update to version 6.1.1-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-1412 ALT-PU-2022-1412: package `qemu` update to version 6.1.1-alt1 | CVSS3: 8.2 | больше 4 лет назад |
Уязвимостей на страницу