Gentoo Project

Virtualization Project

Security Bug Reports

• app-emulation/qemu: NULL pointer derefrence issues (CVE-2020-{25741,25742,25743})

  745396 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: privilege escalation with local access (CVE-2019-14584)

  797232 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: heap overflow vulnerability (CVE-2021-28211)

  797703 - Assigned to Gentoo Security
• <sys-apps/usbredir-0.12.0: use-after-free

  834010 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.8: DoS via crafted packet

  869365 - Assigned to Gentoo Security
• <app-emulation/qemu-9.2.3: multiple vulnerabilities

  877609 - Assigned to Gentoo Security
• <app-containers/lxc-5.0.2: file existence disclosure

  889284 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.9.6: Out-of-bounds access

  898504 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  905342 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.9-r1: multiple vulnerabilities

  924129 - Assigned to Gentoo Security
• <app-emulation/libvirt-10.1.0: off-by-one error in udevListInterfacesByStatus()

  929965 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.10.1: Out-of-bound access in HMAC Signing

  957795 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.10.2: Return of wrong initialization vector when certain symmetric ciphers are used

  968286 - Assigned to Gentoo Security
• <net-misc/openvswitch-{3.3.9,3.7.1}: Invalid memory access in conntrack FTP alg.

  971847 - Assigned to Gentoo Security
• <app-containers/lxc-7.0.0: OVS port deletion authorization bypass in lxc-user-nic

  973573 - Assigned to Gentoo Security
• <app-emulation/qemu-{10.0.10,10.2.3}: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

  977647 - Assigned to Gentoo Security
• <app-crypt/swtpm-0.10.2: Incorrect buffer length check

  981050 - Assigned to Gentoo Security
• <app-containers/incus-7.0.1-r2: Two medium security issues

  981691 - Assigned to Gentoo Security
• <app-emulation/libvirt-12.7.0: multiple vulnerabilities

  983010 - Assigned to Gentoo Security
• <app-containers/incus-7.0.1-r2: vulnerabilities

  983929 - Assigned to Gentoo Security