acrn Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/acrn/ Sun, 26 Feb 2023 06:31:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png acrn Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/acrn/ 32 32 CVE-2019-18844 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-18844/ Sun, 26 Feb 2023 06:31:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-18844/ The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 […]

The post CVE-2019-18844 appeared first on CVE Vulnerability.

]]> The Device Model in ACRN before 2019w25.5-140000p relies on assert calls in devicemodel/hw/pci/core.c and devicemodel/include/pci_core.h (instead of other mechanisms for propagating error information or diagnostic information), which might allow attackers to cause a denial of service (assertion failure) within pci core. This is fixed in 1.2. 6199e653418e is a mitigation for pre-1.1 versions, whereas 2b3dedfb9ba1 is a mitigation for 1.1.

The post CVE-2019-18844 appeared first on CVE Vulnerability.

]]> CVE-2021-36143 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36143/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36143/ ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.

The post CVE-2021-36143 appeared first on CVE Vulnerability.

]]> ACRN before 2.5 has a hw/pci/virtio/virtio.c vq_endchains NULL Pointer Dereference.

The post CVE-2021-36143 appeared first on CVE Vulnerability.

]]> CVE-2021-36144 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36144/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36144/ The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.

The post CVE-2021-36144 appeared first on CVE Vulnerability.

]]> The polling timer handler in ACRN before 2.5 has a use-after-free for a freed virtio device, related to devicemodel/hw/pci/virtio/*.c.

The post CVE-2021-36144 appeared first on CVE Vulnerability.

]]> CVE-2021-36145 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36145/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36145/ The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.

The post CVE-2021-36145 appeared first on CVE Vulnerability.

]]> The Device Model in ACRN through 2.5 has a devicemodel/core/mem.c use-after-free for a freed rb_entry.

The post CVE-2021-36145 appeared first on CVE Vulnerability.

]]> CVE-2021-36146 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36146/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36146/ ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.

The post CVE-2021-36146 appeared first on CVE Vulnerability.

]]> ACRN before 2.5 has a devicemodel/hw/pci/xhci.c NULL Pointer Dereference for a trb pointer.

The post CVE-2021-36146 appeared first on CVE Vulnerability.

]]> CVE-2021-36147 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36147/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36147/ An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used.

The post CVE-2021-36147 appeared first on CVE Vulnerability.

]]> An issue was discovered in ACRN before 2.5. It allows a devicemodel/hw/pci/virtio/virtio_net.c virtio_net_ping_rxq NULL pointer dereference for vq->used.

The post CVE-2021-36147 appeared first on CVE Vulnerability.

]]> CVE-2021-36148 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36148/ Thu, 23 Feb 2023 14:10:38 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36148/ An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buffer overflow.

The post CVE-2021-36148 appeared first on CVE Vulnerability.

]]> An issue was discovered in ACRN before 2.5. dmar_free_irte in hypervisor/arch/x86/vtd.c allows an irte_alloc_bitmap buffer overflow.

The post CVE-2021-36148 appeared first on CVE Vulnerability.

]]>