SLOF vulnerabilities (Red Hat)
130 vulnerabilities.
-
SLOFRed Hat Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow 7.8 High -
SLOFRed Hat Libvirt: swtpm privilege escalation via symlink following 7.8 High -
SLOFRed Hat Qemu-kvm: vnc websocket handshake use-after-free 7.5 High -
SLOFRed Hat Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue 5.9 Medium -
SLOFRed Hat Qemu: denial of service via improper synchronization in qemu nbd server during socket closure 7.5 High -
SLOFRed Hat Libnbd: nbd server improper certificate validation 7.4 High -
SLOFRed Hat Qemu-kvm: 'qemu-img info' leads to host file read/write 7.8 High -
SLOFRed Hat Libvirt: stack use-after-free in virnetclientioeventloop() 6.2 Medium -
SLOFRed Hat Qemu: virtio: dma reentrancy issue leads to double free vulnerability 8.2 High -
SLOFRed Hat Libvirt: negative g_new0 length can lead to unbounded memory allocation 6.2 Medium -
SLOFRed Hat Qemu: vnc: null pointer dereference in qemu_clipboard_request() 6.5 Medium -
SLOFRed Hat Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx() 4.9 Medium -
SLOFRed Hat Qemu: improper ide controller reset can lead to mbr overwrite 6.4 Medium -
SLOFRed Hat Triggerable assertion due to race condition in hot-unplug 5.6 Medium -
SLOFRed Hat Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service 6.5 Medium -
SLOFRed Hat Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() 6.0 Medium -
SLOFRed Hat Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service 7.5 High -
SLOFRed Hat A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR... 5.5 Medium -
SLOFRed Hat TPM2.0 vulnerable to out-of-bounds read 5.5 Medium -
SLOFRed Hat TPM2.0 vulnerable to out-of-bounds write 7.8 High -
SLOFRed Hat An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The... 6.5 Medium -
SLOFRed Hat Important: virt:rhel and virt-devel:rhel security and bug fix update 7.8 High -
SLOFRed Hat An integer underflow issue was found in the QEMU VNC server while processing ClientCutText... 6.5 Medium -
SLOFRed Hat A vulnerability was found in libguestfs. This issue occurs while calculating the greatest... 6.5 Medium -
SLOFRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through... 7.8 High -
SLOFRed Hat A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies... 4.8 Medium -
SLOFRed Hat A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not... 8.2 High -
SLOFRed Hat ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2.... 7.8 High -
SLOFRed Hat A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the... 8.2 High -
SLOFRed Hat A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled... 8.2 High -
SLOFRed Hat A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method... 4.3 Medium -
SLOFRed Hat A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not... 3.2 Low -
SLOFRed Hat A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with... 7.5 High -
SLOFRed Hat A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS... 3.1 Low -
SLOFRed Hat Out-of-bounds read in swtpm 6.2 Medium -
SLOFRed Hat A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This... 7.8 High -
SLOFRed Hat A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to... 6.5 Medium -
SLOFRed Hat A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user... 6.0 Medium -
SLOFRed Hat An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while... 6.5 Medium -
SLOFRed Hat A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in... 6.5 Medium -
SLOFRed Hat A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted... 4.3 Medium -
SLOFRed Hat A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22. 7.8 High -
SLOFRed Hat A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G ... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in... 7.8 High -
SLOFRed Hat A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute... 7.8 High -
SLOFRed Hat A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find... 7.8 High - Show olderLoading…