https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:44:19 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:1759 <p><strong>Affected:</strong> AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)</p> <p>Security Fix(es):</p> <p>* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)</p> <p>* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)</p> <p>* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)</p> <p>* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)</p> <p>* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-202…</p> <p><strong>Affected:</strong> AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>The following packages have been upgraded to a later upstream version: qemu-kvm (6.2.0), libvirt (8.0.0), libvirt-python (8.0.0), perl-Sys-Virt (8.0.0), seabios (1.15.0), libtpms (0.9.1). (BZ#1997410, BZ#2012802, BZ#2012806, BZ#2012813, BZ#2018392, BZ#2027716, BZ#2029355)</p> <p>Security Fix(es):</p> <p>* QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu (CVE-2021-3748)</p> <p>* ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records (CVE-2021-33285)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string (CVE-2021-33286)</p> <p>* ntfs-3g: Heap buffer overflow in ntfs_attr_pread_i() triggered by specially crafted NTFS attributes (CVE-2021-33287)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section (CVE-2021-33289)</p> <p>* ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname (CVE-2021-35266)</p> <p>* ntfs-3g: Stack buffer overflow triggered when correcting differences between MFT and MFTMirror sections (CVE-2021-35267)</p> <p>* ntfs-3g: Heap buffer overflow in ntfs_inode_real_open() triggered by a specially crafted NTFS inode (CVE-202…</p> https://cve.radiocsirt.org/vuln/alsa-2022:1759 https://cve.radiocsirt.org/vuln/euvd-2026-21018 EUVD-2026-21018 https://cve.radiocsirt.org/vuln/euvd-2026-21018 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3716 <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3716 https://cve.radiocsirt.org/vuln/ghsa-3vpg-mwgf-4jvj <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> https://cve.radiocsirt.org/vuln/ghsa-3vpg-mwgf-4jvj https://cve.radiocsirt.org/vuln/gsd-2021-3716 gsd-2021-3716 https://cve.radiocsirt.org/vuln/gsd-2021-3716 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3716 msrc_CVE-2021-3716 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3716 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11078-1 <p>nbdkit-1.27.8-1.2 on GA media</p> <p>nbdkit-1.27.8-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11078-1 https://cve.radiocsirt.org/vuln/rhsa-2022:0397 <p>nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS QEMU: block: fdc: null pointer dereference may lead to guest crash</p> <p>nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS QEMU: block: fdc: null pointer dereference may lead to guest crash</p> https://cve.radiocsirt.org/vuln/rhsa-2022:0397 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3716 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nbdkit, Ubuntu:20.04:LTS: nbdkit, Ubuntu:22.04:LTS: nbdkit, Ubuntu:24.04:LTS: nbdkit, Ubuntu:25.10: nbdkit, Ubuntu:26.04:LTS: nbdkit</p> <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nbdkit, Ubuntu:20.04:LTS: nbdkit, Ubuntu:22.04:LTS: nbdkit, Ubuntu:24.04:LTS: nbdkit, Ubuntu:25.10: nbdkit, Ubuntu:26.04:LTS: nbdkit</p> <p>A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3716