https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:12:38 +0000 https://cve.radiocsirt.org/vuln/alsa-2019:3345 <p><strong>Affected:</strong> AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)</p> <p>* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)</p> <p>* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libiscsi, AlmaLinux:8: libiscsi-devel, AlmaLinux:8: libiscsi-utils, AlmaLinux:8: netcf, AlmaLinux:8: netcf-devel, AlmaLinux:8: netcf-libs, AlmaLinux:8: sgabios, AlmaLinux:8: sgabios-bin</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755)</p> <p>* QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables (CVE-2019-9824)</p> <p>* QEMU: qxl: null pointer dereference while releasing spice resources (CVE-2019-12155)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2019:3345 https://cve.radiocsirt.org/vuln/bdu:2019-01549 bdu:2019-01549 https://cve.radiocsirt.org/vuln/bdu:2019-01549 https://cve.radiocsirt.org/vuln/euvd-2026-53099 EUVD-2026-53099 https://cve.radiocsirt.org/vuln/euvd-2026-53099 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9755 <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9755 https://cve.radiocsirt.org/vuln/ghsa-497j-f639-7ww4 <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-497j-f639-7ww4 https://cve.radiocsirt.org/vuln/gsd-2019-9755 gsd-2019-9755 https://cve.radiocsirt.org/vuln/gsd-2019-9755 https://cve.radiocsirt.org/vuln/msrc_cve-2019-9755 msrc_CVE-2019-9755 https://cve.radiocsirt.org/vuln/msrc_cve-2019-9755 https://cve.radiocsirt.org/vuln/opensuse-su-2019:1314-1 <p>Security update for ntfs-3g_ntfsprogs</p> <p>Security update for ntfs-3g_ntfsprogs</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:1314-1 https://cve.radiocsirt.org/vuln/rhba-2019:3723 <p>libvirt: virsh domhostname command discloses guest hostname in readonly mode ntfs-3g: heap-based buffer overflow leads to local root privilege escalation QEMU: qxl: null pointer dereference while releasing spice resources QEMU: slirp: heap buffer overflow during packet reassembly</p> <p>libvirt: virsh domhostname command discloses guest hostname in readonly mode ntfs-3g: heap-based buffer overflow leads to local root privilege escalation QEMU: qxl: null pointer dereference while releasing spice resources QEMU: slirp: heap buffer overflow during packet reassembly</p> https://cve.radiocsirt.org/vuln/rhba-2019:3723 https://cve.radiocsirt.org/vuln/suse-su-2019:1000-1 <p>Security update for ntfs-3g_ntfsprogs</p> <p>Security update for ntfs-3g_ntfsprogs</p> https://cve.radiocsirt.org/vuln/suse-su-2019:1000-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9755 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g</p> <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ntfs-3g, Ubuntu:16.04:LTS: ntfs-3g, Ubuntu:18.04:LTS: ntfs-3g</p> <p>An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbitrary code. In installations where /bin/ntfs-3g is a setuid-root binary, this could lead to a local escalation of privileges.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9755 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0517