rpm package
almalinux/libiscsi
pkg:rpm/almalinux/libiscsi
Vulnerabilities (96)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-15859 | Low | 3.3 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jul 21, 2020 | QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. | |
| CVE-2020-10756 | Med | 6.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jul 9, 2020 | An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of | |
| CVE-2020-13754 | Med | 6.7 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jun 2, 2020 | hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation. | |
| CVE-2020-10703 | Med | 6.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jun 2, 2020 | A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as netwo | |
| CVE-2020-1983 | Hig | 7.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Apr 22, 2020 | A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service. | |
| CVE-2019-20485 | Med | 5.7 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Mar 19, 2020 | qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage). | |
| CVE-2019-20382 | Low | 3.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Mar 5, 2020 | QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd. | |
| CVE-2020-1711 | Hig | 7.7 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Feb 11, 2020 | An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user | |
| CVE-2020-8608 | Med | 5.6 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Feb 6, 2020 | In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. | |
| CVE-2020-7039 | Med | 5.6 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jan 16, 2020 | tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code. | |
| CVE-2019-11135 | Med | 6.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Nov 14, 2019 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. | |
| CVE-2019-15890 | Hig | 7.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Sep 6, 2019 | libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. | |
| CVE-2019-9755 | Hig | 7.0 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jun 5, 2019 | An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbi | |
| CVE-2019-9824 | Med | 5.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jun 3, 2019 | tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure. | |
| CVE-2019-12155 | Hig | 7.5 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | May 24, 2019 | interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. | |
| CVE-2018-13405 | Hig | 7.8 | < 1.18.0-8.module_el8.6.0+2880+7d9e3703 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 | Jul 6, 2018 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the no |
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as netwo
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
qemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query to a guest agent, which allows attackers to cause a denial of service (API blockage).
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Block (LBA) in an iscsi_co_block_status() routine. A remote user
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running /bin/ntfs-3g with specially crafted arguments from a specially crafted directory to cause a heap buffer overflow, resulting in a crash or the ability to execute arbi
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
- affected < 1.18.0-8.module_el8.6.0+2880+7d9e3703fixed 1.18.0-8.module_el8.6.0+2880+7d9e3703
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the no
Page 5 of 5