https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:35:43.742599+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3345 ALSA-2019:3345 — Low: virt:rhel security, bug fix, and enhancement update 2026-10-03T02:35:43.771404+00:00

Affected: AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)

* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)

* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-02736 bdu:2019-02736 2026-10-03T02:35:43.771496+00:00 bdu:2019-02736 https://cve.radiocsirt.org/vuln/bell-cve-2019-9824 Withdrawn: BELL-CVE-2019-9824 — CVE-2019-9824 does not affect BellSoft software 2026-10-03T02:35:43.771514+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2020-avi-015 certfr-2020-avi-015 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-03T02:35:43.771530+00:00 certfr-2020-avi-015 https://cve.radiocsirt.org/vuln/cnvd-2019-07886 cnvd-2019-07886 2026-10-03T02:35:43.771544+00:00 cnvd-2019-07886 https://cve.radiocsirt.org/vuln/euvd-2026-53127 EUVD-2026-53127 2026-10-03T02:35:43.771555+00:00 EUVD-2026-53127 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9824 fkie_cve-2019-9824 2026-10-03T02:35:43.771565+00:00

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-hx33-mww2-6mf5 GHSA-hx33-mww2-6mf5 2026-10-03T02:35:43.771585+00:00

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2019-9824 gsd-2019-9824 2026-10-03T02:35:43.771599+00:00 gsd-2019-9824 https://cve.radiocsirt.org/vuln/rhsa-2019:1650 RHSA-2019:1650 — Red Hat Security Advisory: qemu-kvm security update 2026-10-03T02:35:43.771609+00:00

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

 https://cve.radiocsirt.org/vuln/rhsa-2019:2078 RHSA-2019:2078 — Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update 2026-10-03T02:35:43.771627+00:00

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

 https://cve.radiocsirt.org/vuln/suse-su-2019:0825-1 SUSE-SU-2019:0825-1 — Security update for xen 2026-10-03T02:35:43.771642+00:00

Security update for xen

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9824 UBUNTU-CVE-2019-9824 2026-10-03T02:35:43.771660+00:00

Affected: Ubuntu:14.04:LTS: qemu, Ubuntu:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1989 WID-SEC-W-2024-1989 — QEMU: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T02:35:43.771680+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um Informationen offenzulegen.