Количество 24
Количество 24
CVE-2018-12617
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
CVE-2018-12617
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
CVE-2018-12617
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
CVE-2018-12617
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c i ...
openSUSE-SU-2018:2693-1
Security update for qemu
SUSE-SU-2018:2679-1
Security update for qemu
GHSA-prpr-q2gp-hgw2
qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket.
BDU:2020-00757
Уязвимость функции qmp_guest_file_read эмулятора аппаратного обеспечения QEMU, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2018:3709-1
Security update for qemu
SUSE-SU-2018:3555-1
Security update for qemu
SUSE-SU-2018:2973-2
Security update for qemu
SUSE-SU-2018:2973-1
Security update for qemu
SUSE-SU-2018:2650-1
Security update for kvm
SUSE-SU-2018:2615-1
Security update for kvm
SUSE-SU-2018:2565-1
Security update for qemu
SUSE-SU-2018:2556-1
Security update for qemu
SUSE-SU-2018:2069-1
Security update for xen
SUSE-SU-2018:2056-1
Security update for xen
SUSE-SU-2018:2037-1
Security update for xen
ELSA-2018-4262
ELSA-2018-4262: qemu security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-12617 qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket. | CVSS3: 7.5 | 46% Средний | почти 7 лет назад |
 | CVE-2018-12617 qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket. | CVSS3: 3.8 | 46% Средний | почти 7 лет назад |
 | CVE-2018-12617 qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket. | CVSS3: 7.5 | 46% Средний | почти 7 лет назад |
| CVE-2018-12617 qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c i ... | CVSS3: 7.5 | 46% Средний | почти 7 лет назад |
 | openSUSE-SU-2018:2693-1 Security update for qemu | 46% Средний | почти 7 лет назад | |
| SUSE-SU-2018:2679-1 Security update for qemu | 46% Средний | почти 7 лет назад | |
| GHSA-prpr-q2gp-hgw2 qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causing a g_malloc0() call to trigger a segmentation fault when trying to allocate a large memory chunk. The vulnerability can be exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the listening socket. | CVSS3: 7.5 | 46% Средний | около 3 лет назад |
 | BDU:2020-00757 Уязвимость функции qmp_guest_file_read эмулятора аппаратного обеспечения QEMU, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 46% Средний | около 7 лет назад |
| openSUSE-SU-2018:3709-1 Security update for qemu | больше 6 лет назад | ||
| SUSE-SU-2018:3555-1 Security update for qemu | больше 6 лет назад | ||
| SUSE-SU-2018:2973-2 Security update for qemu | больше 6 лет назад | ||
| SUSE-SU-2018:2973-1 Security update for qemu | больше 6 лет назад | ||
| SUSE-SU-2018:2650-1 Security update for kvm | почти 7 лет назад | ||
| SUSE-SU-2018:2615-1 Security update for kvm | почти 7 лет назад | ||
| SUSE-SU-2018:2565-1 Security update for qemu | почти 7 лет назад | ||
| SUSE-SU-2018:2556-1 Security update for qemu | почти 7 лет назад | ||
| SUSE-SU-2018:2069-1 Security update for xen | почти 7 лет назад | ||
| SUSE-SU-2018:2056-1 Security update for xen | почти 7 лет назад | ||
| SUSE-SU-2018:2037-1 Security update for xen | почти 7 лет назад | ||
| ELSA-2018-4262 ELSA-2018-4262: qemu security update (IMPORTANT) | больше 6 лет назад |
Уязвимостей на страницу