https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:44:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07318 bdu:2024-07318 https://cve.radiocsirt.org/vuln/bdu:2024-07318 https://cve.radiocsirt.org/vuln/bell-cve-2022-2962 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-2962 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318 certfr-2023-avi-0318 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318 https://cve.radiocsirt.org/vuln/euvd-2026-233718 EUVD-2026-233718 https://cve.radiocsirt.org/vuln/euvd-2026-233718 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2962 <p>A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&#39;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.</p> <p>A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&#39;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2962 https://cve.radiocsirt.org/vuln/ghsa-wmwv-5vwp-c54w <p>A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&#39;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.</p> <p>A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&#39;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.</p> https://cve.radiocsirt.org/vuln/ghsa-wmwv-5vwp-c54w https://cve.radiocsirt.org/vuln/gsd-2022-2962 gsd-2022-2962 https://cve.radiocsirt.org/vuln/gsd-2022-2962 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2962 msrc_CVE-2022-2962 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2962 https://cve.radiocsirt.org/vuln/oesa-2022-1997 <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>QEMU has two operating modes:</p> <p>Full system emulation. In this mode, QEMU emulates a full system (for example a PC), including one or several processors and various peripherals. It can be used to launch different Operating Systems without rebooting the PC or to debug system code.</p> <p>User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging. You can refer to https://www.qemu.org for more infortmation. Security Fix(es): An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.(CVE-2021-3638) A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&amp;apos;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>QEMU has two operating modes:</p> <p>Full system emulation. In this mode, QEMU emulates a full system (for example a PC), including one or several processors and various peripherals. It can be used to launch different Operating Systems without rebooting the PC or to debug system code.</p> <p>User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging. You can refer to https://www.qemu.org for more infortmation. Security Fix(es): An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.(CVE-2021-3638) A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descriptor or copies the rx/tx frame, it doesn&amp;apos;t check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers multiple times, possibly leading to a stack or heap overflow. A malicious guest could use this flaw to crash the QEMU process on the host…</p> https://cve.radiocsirt.org/vuln/oesa-2022-1997 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1158 <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1158