https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:02:36.342915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:0348 ALSA-2020:0348 — Important: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-03T13:02:36.743941+00:00

Affected: AlmaLinux:8: cockpit-podman, AlmaLinux:8: containernetworking-plugins, AlmaLinux:8: python-podman-api, AlmaLinux:8: udica

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() (CVE-2020-7039)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-01447 bdu:2020-01447 2026-10-03T13:02:36.744025+00:00 bdu:2020-01447 https://cve.radiocsirt.org/vuln/certfr-2022-avi-267 certfr-2022-avi-267 — De multiples vulnérabilités ont été découvertes dans Juniper Networks Junos Space. Elles permettent à un attaquant de p… 2026-10-03T13:02:36.744044+00:00 certfr-2022-avi-267 https://cve.radiocsirt.org/vuln/euvd-2026-37678 EUVD-2026-37678 2026-10-03T13:02:36.744061+00:00 EUVD-2026-37678 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7039 fkie_cve-2020-7039 2026-10-03T13:02:36.744072+00:00

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-fr8m-vw66-8v9r GHSA-fr8m-vw66-8v9r 2026-10-03T13:02:36.744095+00:00

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

 https://cve.radiocsirt.org/vuln/gsd-2020-7039 gsd-2020-7039 2026-10-03T13:02:36.744110+00:00 gsd-2020-7039 https://cve.radiocsirt.org/vuln/msrc_cve-2020-7039 msrc_CVE-2020-7039 — tcp_emu in tcp_subr.c in libslirp 4.1.0 as used in QEMU 4.2.0 mismanages memory as demonstrated by IRC DCC commands in… 2026-10-03T13:02:36.744121+00:00 msrc_CVE-2020-7039 https://cve.radiocsirt.org/vuln/rhba-2020:0390 RHBA-2020:0390 — Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.1 packages update 2026-10-03T13:02:36.744140+00:00

golang: invalid public key causes panic in dsa.Verify QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host

 https://cve.radiocsirt.org/vuln/rhsa-2020:0348 RHSA-2020:0348 — Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update 2026-10-03T13:02:36.744162+00:00

QEMU: Slirp: use-after-free during packet reassembly QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

 https://cve.radiocsirt.org/vuln/suse-su-2020:14396-1 SUSE-SU-2020:14396-1 — Security update for kvm 2026-10-03T13:02:36.744181+00:00

Security update for kvm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7039 UBUNTU-CVE-2020-7039 2026-10-03T13:02:36.744198+00:00

Affected: Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:14.04:LTS: slirp, Ubuntu:16.04:LTS: qemu, Ubuntu:16.04:LTS: slirp, Ubuntu:18.04:LTS: qemu, Ubuntu:18.04:LTS: slirp

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3379 WID-SEC-W-2024-3379 — QEMU: Mehrere Schwachstellen 2026-10-03T13:02:36.744225+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.