Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 8

Количество 8

github логотип

GHSA-pfxg-46gm-p35h

почти 2 года назад

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.4
EPSS: Низкий
ubuntu логотип

CVE-2024-7730

почти 2 года назад

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2024-7730

больше 2 лет назад

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2024-7730

почти 2 года назад

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2024-7730

больше 1 года назад

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2024-7730

почти 2 года назад

A heap buffer overflow was found in the virtio-snd device in QEMU. Whe ...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2024-10153

больше 2 лет назад

Уязвимость функции virtio_snd_pcm_in_cb эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7.4
EPSS: Низкий
altlinux логотип

ALT-PU-2024-16640

почти 2 года назад

ALT-PU-2024-16640: package `qemu` update to version 9.1.2-alt1

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-pfxg-46gm-p35h

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.4
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-7730

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.8
0%
Низкий
почти 2 года назад
redhat логотип
CVE-2024-7730

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.4
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2024-7730

A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input callback, virtio_snd_pcm_in_cb, the function did not check whether the iov can fit the data buffer. This issue can trigger an out-of-bounds write if the size of the virtio queue element is equal to virtio_snd_pcm_status, which makes the available space for audio data zero.

CVSS3: 7.8
0%
Низкий
почти 2 года назад
msrc логотип
CVE-2024-7730

Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb()

CVSS3: 7.4
0%
Низкий
больше 1 года назад
debian логотип
CVE-2024-7730

A heap buffer overflow was found in the virtio-snd device in QEMU. Whe ...

CVSS3: 7.8
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-10153

Уязвимость функции virtio_snd_pcm_in_cb эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7.4
0%
Низкий
больше 2 лет назад
altlinux логотип
ALT-PU-2024-16640

ALT-PU-2024-16640: package `qemu` update to version 9.1.2-alt1

CVSS3: 7.8
0%
Низкий
почти 2 года назад

Уязвимостей на страницу