Gentoo Project

Virtualization Project

Security Bug Reports

• app-emulation/qemu: NULL pointer derefrence issues (CVE-2020-{25741,25742,25743})

  745396 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: privilege escalation with local access (CVE-2019-14584)

  797232 - Assigned to Gentoo Security
• <sys-firmware/edk2-202105: heap overflow vulnerability (CVE-2021-28211)

  797703 - Assigned to Gentoo Security
• <sys-apps/usbredir-0.12.0: use-after-free

  834010 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.8: DoS via crafted packet

  869365 - Assigned to Gentoo Security
• <app-emulation/qemu-9.2.3: multiple vulnerabilities

  877609 - Assigned to Gentoo Security
• <sys-firmware/ipxe-1.21.1_p20230601: padding oracle attack vulnerability

  882393 - Assigned to Gentoo Security
• <app-containers/lxc-5.0.2: file existence disclosure

  889284 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.9.6: Out-of-bounds access

  898504 - Assigned to Gentoo Security
• app-emulation/qemu: multiple vulnerabilities

  905342 - Assigned to Gentoo Security
• <net-misc/openvswitch-2.17.9-r1: multiple vulnerabilities

  924129 - Assigned to Gentoo Security
• <app-emulation/libvirt-10.1.0: off-by-one error in udevListInterfacesByStatus()

  929965 - Assigned to Gentoo Security
• <app-emulation/libvirt-10.2.0: check for negative array lengths before allocation

  929966 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.10.1: Out-of-bound access in HMAC Signing

  957795 - Assigned to Gentoo Security
• <dev-libs/libtpms-0.10.2: Return of wrong initialization vector when certain symmetric ciphers are used

  968286 - Assigned to Gentoo Security