nbdkit vulnerabilities (Rocky Linux)
96 vulnerabilities.
nbdkitRocky LinuxA crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer...7.8 HighnbdkitRocky LinuxA crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8...7.8 HighnbdkitRocky LinuxA crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22.7.8 HighnbdkitRocky LinuxA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...7.8 HighnbdkitRocky LinuxTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS attribute from the MFT is...7.8 HighnbdkitRocky LinuxTuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode is loaded in the...7.8 HighnbdkitRocky LinuxIn Tuxera NTFS-3G versions < 2021.8.22, a stack buffer overflow can occur when correcting...7.8 HighnbdkitRocky LinuxIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted NTFS inode pathname is supplied...7.8 HighnbdkitRocky LinuxIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted MFT section is supplied in an...7.8 HighnbdkitRocky LinuxTuxera NTFS-3G versions < 2021.8.22, when specially crafted NTFS attributes are read in the...7.8 HighnbdkitRocky LinuxIn Tuxera NTFS-3G versions < 2021.8.22, when a specially crafted unicode string is supplied in an...7.8 HighnbdkitRocky LinuxModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update7.8 HighnbdkitRocky LinuxA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...7.5 HighnbdkitRocky LinuxAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...6.5 MediumnbdkitRocky LinuxA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...6.3 MediumnbdkitRocky LinuxAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....3.8 LownbdkitRocky LinuxAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....3.8 LownbdkitRocky LinuxAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....3.8 LownbdkitRocky LinuxAn invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU....3.8 LownbdkitRocky LinuxA NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs...6.5 MediumnbdkitRocky LinuxA flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of...5.4 MediumnbdkitRocky LinuxA heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It...6.1 MediumnbdkitRocky LinuxIt was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access...6.5 MediumnbdkitRocky LinuxA potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in...6.0 MediumnbdkitRocky LinuxAn infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while...6.5 MediumnbdkitRocky LinuxAn out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller...6.0 MediumnbdkitRocky LinuxA flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared...8.2 HighnbdkitRocky Linuxide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because...3.9 LownbdkitRocky LinuxModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update7.5 HighnbdkitRocky LinuxA flaw was found in the memory management API of QEMU during the initialization of a memory...6.0 MediumnbdkitRocky Linuxhw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer...5.5 MediumnbdkitRocky LinuxModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update4.3 MediumnbdkitRocky Linuxslirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain...4.3 MediumnbdkitRocky LinuxA reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur...3.2 LownbdkitRocky Linuxeth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure...6.5 MediumnbdkitRocky LinuxAn information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP...6.5 MediumnbdkitRocky LinuxA double free memory issue was found to occur in the libvirt API, in versions before 6.8.0,...6.7 MediumnbdkitRocky LinuxA flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the...8.8 HighnbdkitRocky LinuxIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 LownbdkitRocky LinuxQEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an...3.3 LownbdkitRocky Linuxhw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a...6.7 MediumnbdkitRocky Linuxiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 LownbdkitRocky Linuxlibslirp: use after free vulnerability cause a denial of service.7.5 HighnbdkitRocky LinuxA NULL pointer dereference was found in the libvirt API responsible introduced in upstream...6.5 MediumnbdkitRocky Linuxqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...5.7 MediumnbdkitRocky Linuxlibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 High