https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:28:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05173 bdu:2021-05173 https://cve.radiocsirt.org/vuln/bdu:2021-05173 https://cve.radiocsirt.org/vuln/bell-cve-2020-10702 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2020-10702 https://cve.radiocsirt.org/vuln/cnvd-2020-50119 cnvd-2020-50119 https://cve.radiocsirt.org/vuln/cnvd-2020-50119 https://cve.radiocsirt.org/vuln/euvd-2026-40010 EUVD-2026-40010 https://cve.radiocsirt.org/vuln/euvd-2026-40010 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10702 <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10702 https://cve.radiocsirt.org/vuln/ghsa-g793-9qm5-f3q5 <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> https://cve.radiocsirt.org/vuln/ghsa-g793-9qm5-f3q5 https://cve.radiocsirt.org/vuln/gsd-2020-10702 gsd-2020-10702 https://cve.radiocsirt.org/vuln/gsd-2020-10702 https://cve.radiocsirt.org/vuln/msrc_cve-2020-10702 msrc_CVE-2020-10702 https://cve.radiocsirt.org/vuln/msrc_cve-2020-10702 https://cve.radiocsirt.org/vuln/rhba-2020:3172 <p>QEMU: Slirp: use-after-free during packet reassembly QEMU: slirp: use-after-free in ip_reass() function in ip_input.c qemu: weak signature generation in Pointer Authentication support for ARM QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client libvirt: leak of sensitive cookie information via dumpxml luajit: out-of-bounds read because __gc handler frame traversal is mishandled</p> <p>QEMU: Slirp: use-after-free during packet reassembly QEMU: slirp: use-after-free in ip_reass() function in ip_input.c qemu: weak signature generation in Pointer Authentication support for ARM QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client libvirt: leak of sensitive cookie information via dumpxml luajit: out-of-bounds read because __gc handler frame traversal is mishandled</p> https://cve.radiocsirt.org/vuln/rhba-2020:3172 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10702 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: qemu</p> <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: qemu</p> <p>A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-10702 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1977 <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1977