qemu-testsuite vulnerabilities (openSUSE)
72 vulnerabilities.
qemu-testsuiteopenSUSEhw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.5.3 Mediumqemu-testsuiteopenSUSEQEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd...5.0 Mediumqemu-testsuiteopenSUSEQEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is...3.2 Lowqemu-testsuiteopenSUSEhw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the...5.0 Mediumqemu-testsuiteopenSUSEAn out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...5.0 Mediumqemu-testsuiteopenSUSEIn QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This...3.8 Lowqemu-testsuiteopenSUSEhw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow....5.3 Mediumqemu-testsuiteopenSUSEImportant: virt:rhel security update6.5 Mediumqemu-testsuiteopenSUSEIn QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL...2.3 Lowqemu-testsuiteopenSUSEAn assertion failure issue was found in the Network Block Device(NBD) Server in all QEMU versions...5.0 Mediumqemu-testsuiteopenSUSEati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via...6.0 Mediumqemu-testsuiteopenSUSEaddress_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to...2.5 Lowqemu-testsuiteopenSUSEIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...3.2 Lowqemu-testsuiteopenSUSEIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...3.9 Lowqemu-testsuiteopenSUSEIn QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation....3.8 Lowqemu-testsuiteopenSUSEiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 Lowqemu-testsuiteopenSUSEIn libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a...5.6 Mediumqemu-testsuiteopenSUSElibslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.7.5 Highqemu-testsuiteopenSUSEip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet...8.8 Highqemu-testsuiteopenSUSEqemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from...7.8 Highqemu-testsuiteopenSUSEinterface_release_resource in hw/display/qxl.c in QEMU 4.0.0 has a NULL pointer dereference.7.5 Highqemu-testsuiteopenSUSEhw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the...7.5 High