https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:20:33 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:2162 <p><strong>Affected:</strong> AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu-ccw and 9 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>The following packages have been upgraded to a later upstream version: qemu-kvm (7.2.0). (BZ#2111769, BZ#2135806)</p> <p>Security Fix(es):</p> <p>* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165) * QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record (CVE-2022-4172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu-ccw and 9 more</p> <p>Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.</p> <p>The following packages have been upgraded to a later upstream version: qemu-kvm (7.2.0). (BZ#2111769, BZ#2135806)</p> <p>Security Fix(es):</p> <p>* QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion (CVE-2022-3165) * QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record (CVE-2022-4172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:2162 https://cve.radiocsirt.org/vuln/bdu:2024-02427 bdu:2024-02427 https://cve.radiocsirt.org/vuln/bdu:2024-02427 https://cve.radiocsirt.org/vuln/bell-cve-2022-3165 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-3165 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318 certfr-2023-avi-0318 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0318 https://cve.radiocsirt.org/vuln/cnvd-2022-84157 cnvd-2022-84157 https://cve.radiocsirt.org/vuln/cnvd-2022-84157 https://cve.radiocsirt.org/vuln/esea-2023:0283 <p>virt:rhel bug fix update for RHSA-2023:2757</p> <p>virt:rhel bug fix update for RHSA-2023:2757</p> https://cve.radiocsirt.org/vuln/esea-2023:0283 https://cve.radiocsirt.org/vuln/euvd-2026-239369 EUVD-2026-239369 https://cve.radiocsirt.org/vuln/euvd-2026-239369 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3165 <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3165 https://cve.radiocsirt.org/vuln/ghsa-3wph-8799-87r7 <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-3wph-8799-87r7 https://cve.radiocsirt.org/vuln/gsd-2022-3165 gsd-2022-3165 https://cve.radiocsirt.org/vuln/gsd-2022-3165 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3165 msrc_CVE-2022-3165 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3165 https://cve.radiocsirt.org/vuln/oesa-2022-2024 <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>QEMU has two operating modes:</p> <p>Full system emulation. In this mode, QEMU emulates a full system (for example a PC), including one or several processors and various peripherals. It can be used to launch different Operating Systems without rebooting the PC or to debug system code.</p> <p>User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging. You can refer to https://www.qemu.org for more infortmation. Security Fix(es): An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.(CVE-2022-3165)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed.</p> <p>QEMU has two operating modes:</p> <p>Full system emulation. In this mode, QEMU emulates a full system (for example a PC), including one or several processors and various peripherals. It can be used to launch different Operating Systems without rebooting the PC or to debug system code.</p> <p>User mode emulation. In this mode, QEMU can launch processes compiled for one CPU on another CPU. It can be used to launch the Wine Windows API emulator (https://www.winehq.org) or to ease cross-compilation and cross-debugging. You can refer to https://www.qemu.org for more infortmation. Security Fix(es): An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.(CVE-2022-3165)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2024 https://cve.radiocsirt.org/vuln/rhsa-2023:2757 <p>ntfs-3g: heap-based buffer overflow in ntfsck QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array tpm2: TCG TPM2.0 implementations vulnerable to memory corruption</p> <p>ntfs-3g: heap-based buffer overflow in ntfsck QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array tpm2: TCG TPM2.0 implementations vulnerable to memory corruption</p> https://cve.radiocsirt.org/vuln/rhsa-2023:2757 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3165 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: qemu</p> <p>An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3165 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1535 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1535