https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:07:40 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4191 <p><strong>Affected:</strong> AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-benchmarking, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel, AlmaLinux:8: libguestfs-inspect-icons and 83 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)</p> <p>* libvirt: Insecure sVirt label generation (CVE-2021-3631)</p> <p>* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-benchmarking, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel, AlmaLinux:8: libguestfs-inspect-icons and 83 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)</p> <p>* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)</p> <p>* libvirt: Insecure sVirt label generation (CVE-2021-3631)</p> <p>* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4191 https://cve.radiocsirt.org/vuln/bdu:2024-01496 bdu:2024-01496 https://cve.radiocsirt.org/vuln/bdu:2024-01496 https://cve.radiocsirt.org/vuln/bell-cve-2021-3594 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-3594 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0997 certfr-2024-avi-0997 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0997 https://cve.radiocsirt.org/vuln/cnvd-2021-45769 cnvd-2021-45769 https://cve.radiocsirt.org/vuln/cnvd-2021-45769 https://cve.radiocsirt.org/vuln/euvd-2026-20931 EUVD-2026-20931 https://cve.radiocsirt.org/vuln/euvd-2026-20931 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3594 <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3594 https://cve.radiocsirt.org/vuln/ghsa-wh9f-45px-j437 <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/ghsa-wh9f-45px-j437 https://cve.radiocsirt.org/vuln/gsd-2021-3594 gsd-2021-3594 https://cve.radiocsirt.org/vuln/gsd-2021-3594 https://cve.radiocsirt.org/vuln/opensuse-su-2021:2474-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:2474-1 https://cve.radiocsirt.org/vuln/rhsa-2021:4191 <p>QEMU: net: e1000e: use-after-free while sending packets QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) libvirt: Insecure sVirt label generation libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API</p> <p>QEMU: net: e1000e: use-after-free while sending packets QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) libvirt: Insecure sVirt label generation libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API</p> https://cve.radiocsirt.org/vuln/rhsa-2021:4191 https://cve.radiocsirt.org/vuln/suse-su-2021:14772-1 <p>Security update for kvm</p> <p>Security update for kvm</p> https://cve.radiocsirt.org/vuln/suse-su-2021:14772-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3594 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:18.04:LTS: qemu, Ubuntu:20.04:LTS: libslirp, Ubuntu:22.04:LTS: libslirp</p> <p>An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the &#39;udphdr&#39; structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3594 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1219 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1219