Search CVE reports
21 – 30 of 512 results
A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit...
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: check auth.hdr_length minimum size
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: avoid possibly unaligned variable_auth_2 struct field access
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: verify data size before accessing it in wrap_pkcs7
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: add name_size check to uefi_vars_mm_lock_variable()
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: fix ucs2 string helper functions
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: verify pio_xfer_offset before calculating buffer checksum
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/uefi: fix buffer overruns
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Needs evaluation | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Needs evaluation | Not in release | Not in release | — | — |
hw/display: don't accidentally autofree existing virgl resources
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Vulnerable | Not affected | Not affected | Not affected | Not affected |
| qemu-hwe | Vulnerable | Not in release | Not in release | — | — |
[virtio-scsi request size mismatch]
2 affected packages
qemu, qemu-hwe
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| qemu | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
| qemu-hwe | Vulnerable | Not in release | Not in release | — | — |