https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:22:26 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2017-15118 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-15118 https://cve.radiocsirt.org/vuln/cnvd-2017-38261 cnvd-2017-38261 https://cve.radiocsirt.org/vuln/cnvd-2017-38261 https://cve.radiocsirt.org/vuln/euvd-2026-78446 EUVD-2026-78446 https://cve.radiocsirt.org/vuln/euvd-2026-78446 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15118 <p>A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.</p> <p>A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15118 https://cve.radiocsirt.org/vuln/ghsa-p8q8-xqgv-rwvr <p>A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.</p> <p>A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an export name of size up to 4096 bytes, which in fact should be limited to 256 bytes, causing an out-of-bounds stack write in the qemu process. If NBD server requires TLS, the attacker cannot trigger the buffer overflow without first successfully negotiating TLS.</p> https://cve.radiocsirt.org/vuln/ghsa-p8q8-xqgv-rwvr https://cve.radiocsirt.org/vuln/gsd-2017-15118 gsd-2017-15118 https://cve.radiocsirt.org/vuln/gsd-2017-15118 https://cve.radiocsirt.org/vuln/rhsa-2018:1104 <p>QEMU: vga: OOB read access during display update QEMU: VGA: reachable assert failure during display update QEMU: Slirp: use-after-free when sending response Qemu: stack buffer overflow in NBD server triggered via long export name qemu: DoS via large option request Qemu: memory exhaustion through framebuffer update request message in VNC server QEMU: I/O: potential memory exhaustion via websock connection to VNC Qemu: Out-of-bounds read in vga_draw_text routine</p> <p>QEMU: vga: OOB read access during display update QEMU: VGA: reachable assert failure during display update QEMU: Slirp: use-after-free when sending response Qemu: stack buffer overflow in NBD server triggered via long export name qemu: DoS via large option request Qemu: memory exhaustion through framebuffer update request message in VNC server QEMU: I/O: potential memory exhaustion via websock connection to VNC Qemu: Out-of-bounds read in vga_draw_text routine</p> https://cve.radiocsirt.org/vuln/rhsa-2018:1104