TI-2023-03050 CVE-2023-3255 · GHSA-p5xv-5g6h-qw33
Qemu: vnc: infinite loop in inflate_buffer() leads to denial of service
Priority LOW 33
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.
RHSA-2024:2962
virt:rhel and virt-devel:rhel security and enhancement update
Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.noarch::virt:rhel, SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64::virt:rhel +47
- Red Hat Enterprise Linux CRB (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel +47
Fixes 4 records
TI-2023-04682 CVE-2023-5088 · GHSA-9627-hqj3-f64h
Qemu: improper ide controller reset can lead to mbr overwrite
Priority LOW 32
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code).
TI-2023-06113 CVE-2023-6683 · GHSA-x9c6-9g9w-hg73
Qemu: vnc: null pointer dereference in qemu_clipboard_request()
Priority LOW 31
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages.
TI-2023-06121 CVE-2023-6693 · GHSA-835p-c6x8-xh5f
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
Priority LOW 24
A stack based buffer overflow was found in the virtio-net device of QEMU.