https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:00:21 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4191 <p><strong>Affected:</strong> AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-benchmarking, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel, AlmaLinux:8: libguestfs-inspect-icons and 83 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)</p> <p>* libvirt: Insecure sVirt label generation (CVE-2021-3631)</p> <p>* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-benchmarking, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel, AlmaLinux:8: libguestfs-inspect-icons and 83 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)</p> <p>* libvirt: Insecure sVirt label generation (CVE-2021-3631)</p> <p>* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4191 https://cve.radiocsirt.org/vuln/bdu:2022-05822 bdu:2022-05822 https://cve.radiocsirt.org/vuln/bdu:2022-05822 https://cve.radiocsirt.org/vuln/bell-cve-2021-3593 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-3593 https://cve.radiocsirt.org/vuln/cnvd-2021-45768 cnvd-2021-45768 https://cve.radiocsirt.org/vuln/cnvd-2021-45768 https://cve.radiocsirt.org/vuln/euvd-2026-20990 EUVD-2026-20990 https://cve.radiocsirt.org/vuln/euvd-2026-20990 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3593 <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3593 https://cve.radiocsirt.org/vuln/ghsa-3qp6-x64q-v369 <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/ghsa-3qp6-x64q-v369 https://cve.radiocsirt.org/vuln/gsd-2021-3593 gsd-2021-3593 https://cve.radiocsirt.org/vuln/gsd-2021-3593 https://cve.radiocsirt.org/vuln/oesa-2021-1411 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP2: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;udphdr&amp;apos; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3593) An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;bootp_t&amp;apos; structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3592) An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;tftp_t&amp;apos; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3595)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: qemu, openEuler:20.03-LTS-SP2: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;udphdr&amp;apos; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3593) An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;bootp_t&amp;apos; structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3592) An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the &amp;apos;tftp_t&amp;apos; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-3595)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1411 https://cve.radiocsirt.org/vuln/opensuse-su-2021:2474-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:2474-1 https://cve.radiocsirt.org/vuln/rhsa-2021:4191 <p>QEMU: net: e1000e: use-after-free while sending packets QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) libvirt: Insecure sVirt label generation libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API</p> <p>QEMU: net: e1000e: use-after-free while sending packets QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) libvirt: Insecure sVirt label generation libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4191 https://cve.radiocsirt.org/vuln/suse-su-2021:2428-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/suse-su-2021:2428-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3593 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3593 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1219 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1219