Gentoo Project

Virtualization Project

Security Bug Reports

• app-emulation/qemu: NULL pointer derefrence issues (CVE-2020-{25741,25742,25743})

  745396 - Assigned to Gentoo Security
• <app-emulation/spice-vdagent-0.21.0: Multiple vulnerabilities (CVE-2020-{25650,25651,25652,25653})

  753956 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.14.1: Denial of service (CVE-2020-27827)

  765346 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.15.0: limitation in the OVS packet parsing in userspace leads to DoS (CVE-2020-35498)

  769995 - Assigned to Gentoo Security
• <sys-firmware/edk2-ovmf-202105: privilege escalation with local access (CVE-2019-14584)

  797232 - Assigned to Gentoo Security
• <sys-firmware/edk2-ovmf-202105: heap overflow vulnerability (CVE-2021-28211)

  797703 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.2: multiple vulnerabilities

  803107 - Assigned to Gentoo Security
• <sys-apps/usbredir-0.12.0: use-after-free

  834010 - Assigned to Gentoo Security
• <app-emulation/libvirt-8.2.0: unprivileged daemon DoS

  836128 - Assigned to Gentoo Security
• <app-emulation/qemu-7.1.0: multiple vulnerabilities

  857657 - Assigned to Gentoo Security
• <app-emulation/qemu-8.0.0: multiple vulnerabilities

  865121 - Assigned to Gentoo Security
• net-misc/openvswitch: DoS via crafted packet

  869365 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  877609 - Assigned to Gentoo Security
• sys-firmware/ipxe: padding oracle attack vulnerability

  882393 - Assigned to Gentoo Security
• <app-emulation/qemu-7.2.0_rc3: multiple vulnerabilities

  883693 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.6: multiple vulnerabilities

  887561 - Assigned to Gentoo Security
• <app-containers/lxc-5.0.2: file existence disclosure

  889284 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.9.6: Out-of-bounds access

  898504 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  905342 - Assigned to Gentoo Security
• app-emulation/libvirt: large memory leak

  908042 - Assigned to Gentoo Security