296,147
Total vulnerabilities in the database
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of src_len and dst_len in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
| Software | From | Fixed in |
|---|---|---|
| fedoraproject / fedora | 38 | 38.x |
| debian / debian_linux | 10.0 | 10.0.x |
| qemu / qemu | - | 8.1.0 |
| qemu / qemu | 8.1.0-rc2 | 8.1.0-rc2.x |
| qemu / qemu | 8.1.0-rc1 | 8.1.0-rc1.x |
| qemu / qemu | 8.1.0-rc0 | 8.1.0-rc0.x |