https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:23:11.435299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:3061 ALSA-2021:3061 — Moderate: virt:rhel and virt-devel:rhel security and bug fix update 2026-10-03T22:23:11.456096+00:00

Affected: AlmaLinux:8: libguestfs-winsupport, AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: libnbd, AlmaLinux:8: libnbd-devel, AlmaLinux:8: libvirt-dbus, AlmaLinux:8: nbdfuse, AlmaLinux:8: nbdkit, AlmaLinux:8: nbdkit-bash-completion and 25 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* QEMU: msix: OOB access during mmio operations may lead to DoS (CVE-2020-13754)

* hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504)

* QEMU: net: an assert failure via eth_get_gso_type (CVE-2020-27617)

* QEMU: net: infinite loop in loopback mode may lead to stack overflow (CVE-2021-3416)

* qemu: out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* cannot restart default network and firewalld: iptables: No chain/target/match by that name. (BZ#1958301)

* RHEL8.4 Nightly[0322] - KVM guest fails to find zipl boot menu index (qemu-kvm) (BZ#1975679)

 https://cve.radiocsirt.org/vuln/bdu:2021-04581 bdu:2021-04581 2026-10-03T22:23:11.456201+00:00 bdu:2021-04581 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0051 certfr-2023-avi-0051 — De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un atta… 2026-10-03T22:23:11.456219+00:00 certfr-2023-avi-0051 https://cve.radiocsirt.org/vuln/euvd-2026-20857 EUVD-2026-20857 2026-10-03T22:23:11.456235+00:00 EUVD-2026-20857 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3504 fkie_cve-2021-3504 2026-10-03T22:23:11.456246+00:00

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/ghsa-5vp3-c6x6-5464 GHSA-5vp3-c6x6-5464 2026-10-03T22:23:11.456268+00:00

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.

 https://cve.radiocsirt.org/vuln/gsd-2021-3504 gsd-2021-3504 2026-10-03T22:23:11.456294+00:00 gsd-2021-3504 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3504 msrc_CVE-2021-3504 — A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the… 2026-10-03T22:23:11.456306+00:00 msrc_CVE-2021-3504 https://cve.radiocsirt.org/vuln/oesa-2021-1200 OESA-2021-1200 — hivex security update 2026-10-03T22:23:11.456322+00:00

Affected: openEuler:20.03-LTS-SP1: hivex

Hivex is a library for extracting the contents of Windows Registry "hive" files. It is designed to be secure against buggy or malicious registry files. Security Fix(es): A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.(CVE-2021-3504)

 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0806-1 openSUSE-SU-2021:0806-1 — Security update for hivex 2026-10-03T22:23:11.456346+00:00

Security update for hivex

 https://cve.radiocsirt.org/vuln/rhsa-2021:3061 RHSA-2021:3061 — Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update 2026-10-03T22:23:11.456362+00:00

QEMU: msix: OOB access during mmio operations may lead to DoS QEMU: net: an assert failure via eth_get_gso_type QEMU: net: Infinite loop in loopback mode may lead to stack overflow hivex: Buffer overflow when provided invalid node key length qemu: out-of-bound heap buffer access via an interrupt ID field

 https://cve.radiocsirt.org/vuln/suse-su-2021:1760-1 SUSE-SU-2021:1760-1 — Security update for hivex 2026-10-03T22:23:11.456382+00:00

Security update for hivex

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3504 UBUNTU-CVE-2021-3504 2026-10-03T22:23:11.456396+00:00

Affected: Ubuntu:Pro:14.04:LTS: hivex, Ubuntu:Pro:16.04:LTS: hivex, Ubuntu:18.04:LTS: hivex, Ubuntu:20.04:LTS: hivex, Ubuntu:22.04:LTS: hivex, Ubuntu:24.04:LTS: hivex, Ubuntu:25.10: hivex, Ubuntu:26.04:LTS: hivex

A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.