https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:52:11.818383+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3345 ALSA-2019:3345 — Low: virt:rhel security, bug fix, and enhancement update 2026-10-03T10:52:12.213831+00:00

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-00700 bdu:2020-00700 2026-10-03T10:52:12.213930+00:00 bdu:2020-00700 https://cve.radiocsirt.org/vuln/bell-cve-2019-12155 Withdrawn: BELL-CVE-2019-12155 — CVE-2019-12155 does not affect BellSoft software 2026-10-03T10:52:12.213949+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T10:52:12.213965+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-54853 EUVD-2026-54853 2026-10-03T10:52:12.213980+00:00 EUVD-2026-54853 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12155 fkie_cve-2019-12155 2026-10-03T10:52:12.213991+00:00

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/ghsa-96vp-7vcr-rp4h GHSA-96vp-7vcr-rp4h 2026-10-03T10:52:12.214011+00:00

interface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/gsd-2019-12155 gsd-2019-12155 2026-10-03T10:52:12.214032+00:00 gsd-2019-12155 https://cve.radiocsirt.org/vuln/rhba-2019:3723 RHBA-2019:3723 — Red Hat Bug Fix Advisory: Advanced Virtualization bug fix and enhancement update 2026-10-03T10:52:12.214044+00:00

libvirt: virsh domhostname command discloses guest hostname in readonly mode ntfs-3g: heap-based buffer overflow leads to local root privilege escalation QEMU: qxl: null pointer dereference while releasing spice resources QEMU: slirp: heap buffer overflow during packet reassembly

 https://cve.radiocsirt.org/vuln/rhsa-2019:2607 RHSA-2019:2607 — Red Hat Security Advisory: qemu-kvm security update 2026-10-03T10:52:12.214108+00:00

QEMU: qxl: null pointer dereference while releasing spice resources

 https://cve.radiocsirt.org/vuln/suse-su-2019:14151-1 SUSE-SU-2019:14151-1 — Security update for kvm 2026-10-03T10:52:12.214124+00:00

Security update for kvm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12155 UBUNTU-CVE-2019-12155 2026-10-03T10:52:12.214140+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: qemu

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1986 WID-SEC-W-2024-1986 — QEMU: Schwachstellen ermöglichen Denial of Service 2026-10-03T10:52:12.214164+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.