swtpm vulnerabilities (Red Hat)
103 vulnerabilities.
swtpmRed HatA crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call...5.5 MediumswtpmRed HatA crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS...7.8 HighswtpmRed HatA crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in...7.8 HighswtpmRed HatA crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer...7.8 HighswtpmRed HatA crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8...7.8 HighswtpmRed HatA crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.7.8 HighswtpmRed HatA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...7.8 HighswtpmRed HatTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is...7.8 HighswtpmRed HatTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the...7.8 HighswtpmRed HatIn Tuxera NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting...7.8 HighswtpmRed HatIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied...7.8 HighswtpmRed HatIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an...7.8 HighswtpmRed HatTuxera NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the...7.8 HighswtpmRed HatIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an...7.8 HighswtpmRed HatModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update7.8 HighswtpmRed HatA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...7.5 HighswtpmRed HatAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...6.5 MediumswtpmRed HatA flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2....8.5 HighswtpmRed HatA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...6.3 MediumswtpmRed HatA NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs...6.5 MediumswtpmRed HatA heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It...6.1 MediumswtpmRed HatA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...6.0 MediumswtpmRed HatAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...6.5 MediumswtpmRed HatAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...6.0 MediumswtpmRed HatA flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared...8.2 HighswtpmRed Hatide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...3.9 LowswtpmRed HatModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update7.5 HighswtpmRed HatA flaw was found in the memory management API of QEMU during the initialization of a memory...6.0 MediumswtpmRed HatA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...3.2 LowswtpmRed Hateth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...6.5 MediumswtpmRed HatAn information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP...6.5 MediumswtpmRed HatA double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,...6.7 MediumswtpmRed HatAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...5.0 MediumswtpmRed HatA flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the...8.8 HighswtpmRed HatIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 LowswtpmRed HatLuaJit through 2.1.0-beta3 has an out-of-bounds read because __gc handler frame traversal is...7.5 HighswtpmRed HatImportant: virt:rhel security update6.5 MediumswtpmRed HatAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 MediumswtpmRed Hathw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 MediumswtpmRed HatA potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd)...3.3 LowswtpmRed Hatiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LowswtpmRed Hatlibslirp: use after free vulnerability cause a denial of service.7.5 HighswtpmRed HatA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for...5.5 MediumswtpmRed Hatqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...5.7 MediumswtpmRed HatAn out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU...7.7 HighswtpmRed HatIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 MediumswtpmRed Hattcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as...5.6 MediumswtpmRed HatTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...6.5 MediumswtpmRed Hatlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 HighswtpmRed Hatip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 High- Show moreLoading…