https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:56:21 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:6964 <p><strong>Affected:</strong> AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409) * libnbd: NBD server improper certificate validation (CVE-2024-7383)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: SLOF, AlmaLinux:8: hivex, AlmaLinux:8: hivex-devel, AlmaLinux:8: libguestfs, AlmaLinux:8: libguestfs-appliance, AlmaLinux:8: libguestfs-bash-completion, AlmaLinux:8: libguestfs-devel, AlmaLinux:8: libguestfs-gfs2, AlmaLinux:8: libguestfs-gobject, AlmaLinux:8: libguestfs-gobject-devel and 120 more</p> <p>Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.</p> <p>Security Fix(es):</p> <p>* QEMU: virtio: DMA reentrancy issue leads to double free vulnerability (CVE-2024-3446) * QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure (CVE-2024-7409) * libnbd: NBD server improper certificate validation (CVE-2024-7383)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:6964 https://cve.radiocsirt.org/vuln/bdu:2024-06925 bdu:2024-06925 https://cve.radiocsirt.org/vuln/bdu:2024-06925 https://cve.radiocsirt.org/vuln/bell-cve-2024-7409 <p><strong>Affected:</strong> Alpaquita:23: qemu, Alpaquita:stream: qemu</p> <p><strong>Affected:</strong> Alpaquita:23: qemu, Alpaquita:stream: qemu</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-7409 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0967 https://cve.radiocsirt.org/vuln/euvd-2026-362214 EUVD-2026-362214 https://cve.radiocsirt.org/vuln/euvd-2026-362214 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7409 <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7409 https://cve.radiocsirt.org/vuln/ghsa-7c7g-wccp-rrhj <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> https://cve.radiocsirt.org/vuln/ghsa-7c7g-wccp-rrhj https://cve.radiocsirt.org/vuln/msrc_cve-2024-7409 msrc_CVE-2024-7409 https://cve.radiocsirt.org/vuln/msrc_cve-2024-7409 https://cve.radiocsirt.org/vuln/oesa-2024-1988 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.(CVE-2024-7409)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: qemu</p> <p>QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fix(es): A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.(CVE-2024-7409)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1988 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14411-1 <p>qemu-9.1.0-2.1 on GA media</p> <p>qemu-9.1.0-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14411-1 https://cve.radiocsirt.org/vuln/rhsa-2024:10518 <p>go-retryablehttp: url might write sensitive information to log file QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass cross-spawn: regular expression denial of service</p> <p>go-retryablehttp: url might write sensitive information to log file QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass cross-spawn: regular expression denial of service</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10518 https://cve.radiocsirt.org/vuln/suse-su-2024:2983-1 <p>Security update for qemu</p> <p>Security update for qemu</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2983-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7409 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu</p> <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: qemu, Ubuntu:Pro:16.04:LTS: qemu, Ubuntu:Pro:18.04:LTS: qemu, Ubuntu:Pro:20.04:LTS: qemu, Ubuntu:22.04:LTS: qemu, Ubuntu:24.04:LTS: qemu</p> <p>A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-7409 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1750 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1750