CVE-2020-29129

A heap buffer overflow flaw was found in the iSCSI support of QEMU This flaw could lead to an out-of-bounds read access and possible information disclosure from the QEMU process memory to a malicious guest The highest threat from this vulnerability is to data confidentiality (CVE-2020-11947) An infinite loop flaw was found in the e1000e NIC emul ...

ncsic in libslirp through 431 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length A privileged guest user may use this flaw to potentially leak host information bytes ...