Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-3593 (GCVE-0-2021-3593)
Vulnerability from cvelistv5 – Published: 2021-06-15 00:00 – Updated: 2024-08-03 17:01
VLAI?
EPSS
Summary
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
Severity ?
No CVSS data available.
CWE
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1970487 | |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisory |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisory |
| https://security.gentoo.org/glsa/202107-44 | vendor-advisory |
| https://security.netapp.com/advisory/ntap-2021080… | |
| https://lists.debian.org/debian-lts-announce/2022… | mailing-list |
| https://lists.debian.org/debian-lts-announce/2023… | mailing-list |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T17:01:07.949Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"name": "FEDORA-2021-71de23bedd",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"name": "FEDORA-2021-7cd749f133",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"name": "GLSA-202107-44",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
},
{
"name": "[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"name": "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "QEMU",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "libslirp 4.6.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-824",
"description": "CWE-824",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-03-14T00:00:00.000Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"name": "FEDORA-2021-71de23bedd",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"name": "FEDORA-2021-7cd749f133",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"name": "GLSA-202107-44",
"tags": [
"vendor-advisory"
],
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
},
{
"name": "[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"name": "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2021-3593",
"datePublished": "2021-06-15T00:00:00.000Z",
"dateReserved": "2021-06-10T00:00:00.000Z",
"dateUpdated": "2024-08-03T17:01:07.949Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-3593",
"date": "2026-05-21",
"epss": "0.00023",
"percentile": "0.0661"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.6.0\", \"matchCriteriaId\": \"AE2D40D8-B587-4714-AAD2-27876A5B92AF\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F4CFF558-3C47-480D-A2F0-BABF26042943\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*\", \"matchCriteriaId\": \"3AA08768-75AF-4791-B229-AE938C780959\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A930E247-0B43-43CB-98FF-6CE7B8189835\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.\"}, {\"lang\": \"es\", \"value\": \"Se ha encontrado un problema de inicializaci\\u00f3n de puntero no v\\u00e1lido en la implementaci\\u00f3n de redes SLiRP de QEMU. El fallo se presenta en la funci\\u00f3n udp6_input() y podr\\u00eda ocurrir mientras se procesa un paquete udp que sea m\\u00e1s peque\\u00f1o que el tama\\u00f1o de la estructura \\\"udphdr\\\". Este problema puede conllevar a un acceso de lectura fuera de l\\u00edmites o a una divulgaci\\u00f3n indirecta de la memoria del host al invitado. La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos. Este fallo afecta a libslirp versiones anteriores a 4.6.0\"}]",
"id": "CVE-2021-3593",
"lastModified": "2024-11-21T06:21:55.460",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N\", \"baseScore\": 3.8, \"baseSeverity\": \"LOW\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.0, \"impactScore\": 1.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 2.1, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 3.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2021-06-15T21:15:09.677",
"references": "[{\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1970487\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://security.gentoo.org/glsa/202107-44\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210805-0004/\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1970487\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202107-44\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210805-0004/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"secalert@redhat.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-824\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-824\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-3593\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2021-06-15T21:15:09.677\",\"lastModified\":\"2024-11-21T06:21:55.460\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.\"},{\"lang\":\"es\",\"value\":\"Se ha encontrado un problema de inicializaci\u00f3n de puntero no v\u00e1lido en la implementaci\u00f3n de redes SLiRP de QEMU. El fallo se presenta en la funci\u00f3n udp6_input() y podr\u00eda ocurrir mientras se procesa un paquete udp que sea m\u00e1s peque\u00f1o que el tama\u00f1o de la estructura \\\"udphdr\\\". Este problema puede conllevar a un acceso de lectura fuera de l\u00edmites o a una divulgaci\u00f3n indirecta de la memoria del host al invitado. La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos. Este fallo afecta a libslirp versiones anteriores a 4.6.0\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N\",\"baseScore\":3.8,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.0,\"impactScore\":1.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-824\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-824\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6.0\",\"matchCriteriaId\":\"AE2D40D8-B587-4714-AAD2-27876A5B92AF\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*\",\"matchCriteriaId\":\"3AA08768-75AF-4791-B229-AE938C780959\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}],\"references\":[{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1970487\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://security.gentoo.org/glsa/202107-44\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210805-0004/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1970487\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202107-44\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210805-0004/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
alsa-2021:4191
Vulnerability from osv_almalinux
Published
2021-11-09 08:35
Modified
2021-12-23 15:15
Summary
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
Details
Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.
Security Fix(es):
-
QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)
-
QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)
-
QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)
-
QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)
-
QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)
-
libvirt: Insecure sVirt label generation (CVE-2021-3631)
-
libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "hivex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.18-21.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "hivex-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.18-21.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-bash-completion"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-benchmarking"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-gfs2"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-gobject"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-gobject-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-inspect-icons"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-java"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-java-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-javadoc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-man-pages-ja"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-man-pages-uk"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-rescue"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-rsync"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-tools"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-tools-c"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-winsupport"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libguestfs-xfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libiscsi-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.0-8.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libnbd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libnbd-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-admin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-bash-completion"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-client"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-config-network"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-config-nwfilter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-interface"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-network"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-nodedev"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-nwfilter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-qemu"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-secret"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-core"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-disk"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-gluster"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-iscsi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-iscsi-direct"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-logical"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-mpath"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-rbd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-driver-storage-scsi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-daemon-kvm"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-dbus"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.0-2.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-dbus"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.0-2.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-docs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-lock-sanlock"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "libvirt-nss"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-37.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "lua-guestfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdfuse"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-bash-completion"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-basic-filters"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-basic-plugins"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-curl-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-example-plugins"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-gzip-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-linuxdisk-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-python-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-ssh-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-vddk-plugin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "nbdkit-xz-filter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.2-4.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "netcf-libs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.2.8-12.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "perl-Sys-Guestfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "perl-Sys-Virt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "perl-hivex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.18-21.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-hivex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.18-21.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-libguestfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-libnbd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "python3-libvirt"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "6.0.0-1.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "ruby-hivex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.18-21.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "ruby-libguestfs"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "seabios"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.13.0-2.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "seabios-bin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.13.0-2.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "seavgabios-bin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.13.0-2.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "sgabios"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.20170427git-3.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "sgabios"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.20170427git-3.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "sgabios-bin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.20170427git-3.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "sgabios-bin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:0.20170427git-3.module_el8.6.0+2880+7d9e3703"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "supermin"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.19-10.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "supermin-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.19-10.module_el8.5.0+2608+72063365"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "virt-dib"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "virt-v2v"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.40.2-28.module_el8.5.0+2608+72063365.alma"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.\n\nSecurity Fix(es):\n\n* QEMU: net: e1000e: use-after-free while sending packets (CVE-2020-15859)\n\n* QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) (CVE-2021-3592)\n\n* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) (CVE-2021-3593)\n\n* QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) (CVE-2021-3594)\n\n* QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) (CVE-2021-3595)\n\n* libvirt: Insecure sVirt label generation (CVE-2021-3631)\n\n* libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API (CVE-2021-3667)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.",
"id": "ALSA-2021:4191",
"modified": "2021-12-23T15:15:26Z",
"published": "2021-11-09T08:35:34Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2021-4191.html"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2020-15859"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3592"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3593"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3594"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3595"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3631"
},
{
"type": "REPORT",
"url": "https://vulners.com/cve/CVE-2021-3667"
}
],
"related": [
"CVE-2020-15859",
"CVE-2021-3592",
"CVE-2021-3593",
"CVE-2021-3594",
"CVE-2021-3595",
"CVE-2021-3631",
"CVE-2021-3667"
],
"summary": "Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update"
}
BDU:2022-05822
Vulnerability from fstec - Published: 04.06.2021
VLAI Severity ?
Title
Уязвимость функции udp6_input() библиотеки TCP-IP эмулятора Libslirp, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Description
Уязвимость реализации функции udp6_input() библиотеки TCP-IP эмулятора Libslirp связана с использованием неинициализированного указателя при обработке UDP-пакетов с меньшим размером в сравнении со структурой udphdr. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации
Severity ?
Vendor
Сообщество свободного программного обеспечения, Red Hat Inc., Fedora Project, ООО «РусБИТех-Астра», АО «ИВК», АО "НППКТ"
Software Name
Debian GNU/Linux, Red Hat Enterprise Linux, Fedora, Astra Linux Special Edition (запись в едином реестре российских программ №369), Альт 8 СП (запись в едином реестре российских программ №4305), Libslirp, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
Software Version
9 (Debian GNU/Linux), 8 (Red Hat Enterprise Linux), 33 (Fedora), 34 (Fedora), 1.7 (Astra Linux Special Edition), - (Альт 8 СП), 8 Advanced Virtualization (Red Hat Enterprise Linux), 9 (Red Hat Enterprise Linux), до 4.6.0 (Libslirp), 4.7 (Astra Linux Special Edition), до 2.5 (ОСОН ОСнова Оnyx)
Possible Mitigations
Использование рекомендаций:
Для Libslirp:
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/93e645e7
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/de71c15d
https://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.6.0
Для Debian:
https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html
Для Fedora:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2021-3593
Для ОС Альт 8 СП: установка обновления из публичного репозитория программного средства
Для ОСОН ОСнова Оnyx:Обновление программного обеспечения libslirp до версии 4.6.1-1
Для ОС Astra Linux Special Edition 1.7 архитектуры x86-64:
обновить пакет libslirp до 4.4.0-1+deb11u2 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17
Для Astra Linux Special Edition 4.7 для архитектуры ARM:
обновить пакет libslirp до 4.4.0-1+deb11u2 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
Reference
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/
https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3593
https://security.gentoo.org/glsa/202107-44
https://bugzilla.redhat.com/show_bug.cgi?id=1970487
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/93e645e7
https://gitlab.freedesktop.org/slirp/libslirp/-/commit/de71c15d
https://access.redhat.com/security/cve/cve-2021-3593
https://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.6.0
https://altsp.su/obnovleniya-bezopasnosti/
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.5/
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17
https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47
CWE
CWE-824
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:P/I:N/A:N",
"CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Red Hat Inc., Fedora Project, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "9 (Debian GNU/Linux), 8 (Red Hat Enterprise Linux), 33 (Fedora), 34 (Fedora), 1.7 (Astra Linux Special Edition), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), 8 Advanced Virtualization (Red Hat Enterprise Linux), 9 (Red Hat Enterprise Linux), \u0434\u043e 4.6.0 (Libslirp), 4.7 (Astra Linux Special Edition), \u0434\u043e 2.5 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Libslirp:\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/commit/93e645e7\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/commit/de71c15d\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.6.0\n\n\u0414\u043b\u044f Debian:\nhttps://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\n\n\u0414\u043b\u044f Fedora:\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2021-3593\n\n\u0414\u043b\u044f \u041e\u0421 \u0410\u043b\u044c\u0442 8 \u0421\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx:\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f libslirp \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.6.1-1\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux Special Edition 1.7 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86-64:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 libslirp \u0434\u043e 4.4.0-1+deb11u2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17\n\n\u0414\u043b\u044f Astra Linux Special Edition 4.7 \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 libslirp \u0434\u043e 4.4.0-1+deb11u2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.06.2021",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "11.11.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "21.09.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-05822",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-3593",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, Red Hat Enterprise Linux, Fedora, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), Libslirp, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 9 , Red Hat Inc. Red Hat Enterprise Linux 8 , Fedora Project Fedora 33 , Fedora Project Fedora 34 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), Red Hat Inc. Red Hat Enterprise Linux 8 Advanced Virtualization , Red Hat Inc. Red Hat Enterprise Linux 9 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 ARM (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.5 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 udp6_input() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 TCP-IP \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 Libslirp, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f (CWE-824)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 udp6_input() \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 TCP-IP \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 Libslirp \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 UDP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043c\u0435\u043d\u044c\u0448\u0438\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441\u043e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 udphdr. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/\nhttps://lists.debian.org/debian-lts-announce/2022/04/msg00002.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-3593\nhttps://security.gentoo.org/glsa/202107-44\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1970487\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/commit/93e645e7\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/commit/de71c15d\nhttps://access.redhat.com/security/cve/cve-2021-3593\nhttps://gitlab.freedesktop.org/slirp/libslirp/-/releases/v4.6.0\nhttps://altsp.su/obnovleniya-bezopasnosti/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.5/\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0212SE17\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-824",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 1,7)\n\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,8)"
}
CNVD-2021-45768
Vulnerability from cnvd - Published: 2021-06-29
VLAI Severity ?
Title
QEMU无效指针初始化漏洞（CNVD-2021-45768）
Description
QEMU是一套模拟处理器软件。
QEMU存在安全漏洞，该漏洞源于函数udp6_input()处理来自来宾的小于udphdr结构大小的udp数据包时，使用工作mbuf缓冲区外部的内存。攻击者可利用漏洞导致越界读取访问或间接内存泄露。
Severity
低
Patch Name
QEMU无效指针初始化漏洞（CNVD-2021-45768）的补丁
Patch Description
QEMU是一套模拟处理器软件。
QEMU存在安全漏洞，该漏洞源于函数udp6_input()处理来自来宾的小于udphdr结构大小的udp数据包时，使用工作mbuf缓冲区外部的内存。攻击者可利用漏洞导致越界读取访问或间接内存泄露。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新： https://bugzilla.redhat.com/show_bug.cgi?id=1970487
Reference
https://nvd.nist.gov/vuln/detail/CVE-2021-3593
Impacted products
| Name | Qemu QEMU |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2021-3593",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-3593"
}
},
"description": "QEMU\u662f\u4e00\u5957\u6a21\u62df\u5904\u7406\u5668\u8f6f\u4ef6\u3002\n\nQEMU\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u51fd\u6570udp6_input()\u5904\u7406\u6765\u81ea\u6765\u5bbe\u7684\u5c0f\u4e8eudphdr\u7ed3\u6784\u5927\u5c0f\u7684udp\u6570\u636e\u5305\u65f6\uff0c\u4f7f\u7528\u5de5\u4f5cmbuf\u7f13\u51b2\u533a\u5916\u90e8\u7684\u5185\u5b58\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4\u8d8a\u754c\u8bfb\u53d6\u8bbf\u95ee\u6216\u95f4\u63a5\u5185\u5b58\u6cc4\u9732\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1970487",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2021-45768",
"openTime": "2021-06-29",
"patchDescription": "QEMU\u662f\u4e00\u5957\u6a21\u62df\u5904\u7406\u5668\u8f6f\u4ef6\u3002\r\n\r\nQEMU\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u51fd\u6570udp6_input()\u5904\u7406\u6765\u81ea\u6765\u5bbe\u7684\u5c0f\u4e8eudphdr\u7ed3\u6784\u5927\u5c0f\u7684udp\u6570\u636e\u5305\u65f6\uff0c\u4f7f\u7528\u5de5\u4f5cmbuf\u7f13\u51b2\u533a\u5916\u90e8\u7684\u5185\u5b58\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5bfc\u81f4\u8d8a\u754c\u8bfb\u53d6\u8bbf\u95ee\u6216\u95f4\u63a5\u5185\u5b58\u6cc4\u9732\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "QEMU\u65e0\u6548\u6307\u9488\u521d\u59cb\u5316\u6f0f\u6d1e\uff08CNVD-2021-45768\uff09\u7684\u8865\u4e01",
"products": {
"product": "Qemu QEMU"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-3593",
"serverity": "\u4f4e",
"submitTime": "2021-06-16",
"title": "QEMU\u65e0\u6548\u6307\u9488\u521d\u59cb\u5316\u6f0f\u6d1e\uff08CNVD-2021-45768\uff09"
}
FKIE_CVE-2021-3593
Vulnerability from fkie_nvd - Published: 2021-06-15 21:15 - Updated: 2024-11-21 06:21
Severity ?
Summary
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=1970487 | Issue Tracking, Patch, Third Party Advisory | |
| secalert@redhat.com | https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html | ||
| secalert@redhat.com | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ | ||
| secalert@redhat.com | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ | ||
| secalert@redhat.com | https://security.gentoo.org/glsa/202107-44 | Third Party Advisory | |
| secalert@redhat.com | https://security.netapp.com/advisory/ntap-20210805-0004/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=1970487 | Issue Tracking, Patch, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/202107-44 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20210805-0004/ | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| libslirp_project | libslirp | * | |
| redhat | enterprise_linux | 8.0 | |
| redhat | enterprise_linux | 8.0 | |
| fedoraproject | fedora | 33 | |
| fedoraproject | fedora | 34 | |
| debian | debian_linux | 9.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AE2D40D8-B587-4714-AAD2-27876A5B92AF",
"versionEndExcluding": "4.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
"matchCriteriaId": "3AA08768-75AF-4791-B229-AE938C780959",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0."
},
{
"lang": "es",
"value": "Se ha encontrado un problema de inicializaci\u00f3n de puntero no v\u00e1lido en la implementaci\u00f3n de redes SLiRP de QEMU. El fallo se presenta en la funci\u00f3n udp6_input() y podr\u00eda ocurrir mientras se procesa un paquete udp que sea m\u00e1s peque\u00f1o que el tama\u00f1o de la estructura \"udphdr\". Este problema puede conllevar a un acceso de lectura fuera de l\u00edmites o a una divulgaci\u00f3n indirecta de la memoria del host al invitado. La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos. Este fallo afecta a libslirp versiones anteriores a 4.6.0"
}
],
"id": "CVE-2021-3593",
"lastModified": "2024-11-21T06:21:55.460",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.0,
"impactScore": 1.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2021-06-15T21:15:09.677",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"source": "secalert@redhat.com",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
},
{
"source": "secalert@redhat.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"source": "secalert@redhat.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-824"
}
],
"source": "secalert@redhat.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-824"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-3QP6-X64Q-V369
Vulnerability from github – Published: 2022-05-24 19:05 – Updated: 2022-05-24 19:05
VLAI?
Details
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
Severity ?
{
"affected": [],
"aliases": [
"CVE-2021-3593"
],
"database_specific": {
"cwe_ids": [
"CWE-824"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-06-15T21:15:00Z",
"severity": "LOW"
},
"details": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"id": "GHSA-3qp6-x64q-v369",
"modified": "2022-05-24T19:05:19Z",
"published": "2022-05-24T19:05:19Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3593"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20210805-0004"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
GSD-2021-3593
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2021-3593",
"description": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"id": "GSD-2021-3593",
"references": [
"https://www.suse.com/security/cve/CVE-2021-3593.html",
"https://access.redhat.com/errata/RHSA-2021:4191",
"https://ubuntu.com/security/CVE-2021-3593",
"https://advisories.mageia.org/CVE-2021-3593.html",
"https://security.archlinux.org/CVE-2021-3593",
"https://linux.oracle.com/cve/CVE-2021-3593.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-3593"
],
"details": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"id": "GSD-2021-3593",
"modified": "2023-12-13T01:23:34.972159Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2021-3593",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "QEMU",
"version": {
"version_data": [
{
"version_value": "libslirp 4.6.0"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-824"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"name": "FEDORA-2021-71de23bedd",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"name": "FEDORA-2021-7cd749f133",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"name": "GLSA-202107-44",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210805-0004/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
},
{
"name": "[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"name": "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:libslirp_project:libslirp:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.6.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2021-3593"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-824"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1970487"
},
{
"name": "FEDORA-2021-7cd749f133",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/"
},
{
"name": "FEDORA-2021-71de23bedd",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/"
},
{
"name": "GLSA-202107-44",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202107-44"
},
{
"name": "https://security.netapp.com/advisory/ntap-20210805-0004/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20210805-0004/"
},
{
"name": "[debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html"
},
{
"name": "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
"refsource": "MLIST",
"tags": [],
"url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.8,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.0,
"impactScore": 1.4
}
},
"lastModifiedDate": "2023-03-15T00:15Z",
"publishedDate": "2021-06-15T21:15Z"
}
}
}
OPENSUSE-SU-2021:1202-1
Vulnerability from csaf_opensuse - Published: 2021-08-26 16:06 - Updated: 2021-08-26 16:06Summary
Security update for qemu
Severity
Important
Notes
Title of the patch: Security update for qemu
Description of the patch: This update for qemu fixes the following issues:
Security issues fixed:
- CVE-2021-3527: usb: unbounded stack allocation in usbredir (bsc#1186012)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2021-3682: usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145)
- CVE-2020-35503: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432)
- CVE-2020-35504,CVE-2020-35505,CVE-2020-35506: NULL pointer dereference in ESP (bsc#1180433 bsc#1180434 bsc#1180435)
- CVE-2021-20255: eepro100: stack overflow via infinite recursion (bsc#1182651)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames: openSUSE-2021-1202
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.6 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
68 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1180432 | self |
| https://bugzilla.suse.com/1180433 | self |
| https://bugzilla.suse.com/1180434 | self |
| https://bugzilla.suse.com/1180435 | self |
| https://bugzilla.suse.com/1182651 | self |
| https://bugzilla.suse.com/1186012 | self |
| https://bugzilla.suse.com/1187364 | self |
| https://bugzilla.suse.com/1187365 | self |
| https://bugzilla.suse.com/1187366 | self |
| https://bugzilla.suse.com/1187367 | self |
| https://bugzilla.suse.com/1187499 | self |
| https://bugzilla.suse.com/1187529 | self |
| https://bugzilla.suse.com/1187538 | self |
| https://bugzilla.suse.com/1187539 | self |
| https://bugzilla.suse.com/1189145 | self |
| https://www.suse.com/security/cve/CVE-2020-35503/ | self |
| https://www.suse.com/security/cve/CVE-2020-35504/ | self |
| https://www.suse.com/security/cve/CVE-2020-35505/ | self |
| https://www.suse.com/security/cve/CVE-2020-35506/ | self |
| https://www.suse.com/security/cve/CVE-2021-20255/ | self |
| https://www.suse.com/security/cve/CVE-2021-3527/ | self |
| https://www.suse.com/security/cve/CVE-2021-3582/ | self |
| https://www.suse.com/security/cve/CVE-2021-3592/ | self |
| https://www.suse.com/security/cve/CVE-2021-3593/ | self |
| https://www.suse.com/security/cve/CVE-2021-3594/ | self |
| https://www.suse.com/security/cve/CVE-2021-3595/ | self |
| https://www.suse.com/security/cve/CVE-2021-3607/ | self |
| https://www.suse.com/security/cve/CVE-2021-3608/ | self |
| https://www.suse.com/security/cve/CVE-2021-3611/ | self |
| https://www.suse.com/security/cve/CVE-2021-3682/ | self |
| https://www.suse.com/security/cve/CVE-2020-35503 | external |
| https://bugzilla.suse.com/1180432 | external |
| https://www.suse.com/security/cve/CVE-2020-35504 | external |
| https://bugzilla.suse.com/1180433 | external |
| https://www.suse.com/security/cve/CVE-2020-35505 | external |
| https://bugzilla.suse.com/1180434 | external |
| https://www.suse.com/security/cve/CVE-2020-35506 | external |
| https://bugzilla.suse.com/1180435 | external |
| https://www.suse.com/security/cve/CVE-2021-20255 | external |
| https://bugzilla.suse.com/1182651 | external |
| https://bugzilla.suse.com/1182654 | external |
| https://www.suse.com/security/cve/CVE-2021-3527 | external |
| https://bugzilla.suse.com/1186012 | external |
| https://www.suse.com/security/cve/CVE-2021-3582 | external |
| https://bugzilla.suse.com/1187499 | external |
| https://www.suse.com/security/cve/CVE-2021-3592 | external |
| https://bugzilla.suse.com/1187364 | external |
| https://bugzilla.suse.com/1187369 | external |
| https://www.suse.com/security/cve/CVE-2021-3593 | external |
| https://bugzilla.suse.com/1187365 | external |
| https://www.suse.com/security/cve/CVE-2021-3594 | external |
| https://bugzilla.suse.com/1187367 | external |
| https://www.suse.com/security/cve/CVE-2021-3595 | external |
| https://bugzilla.suse.com/1187366 | external |
| https://bugzilla.suse.com/1187376 | external |
| https://www.suse.com/security/cve/CVE-2021-3607 | external |
| https://bugzilla.suse.com/1187539 | external |
| https://www.suse.com/security/cve/CVE-2021-3608 | external |
| https://bugzilla.suse.com/1187538 | external |
| https://www.suse.com/security/cve/CVE-2021-3611 | external |
| https://bugzilla.suse.com/1187529 | external |
| https://bugzilla.suse.com/1193914 | external |
| https://www.suse.com/security/cve/CVE-2021-3682 | external |
| https://bugzilla.suse.com/1189145 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for qemu",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3527: usb: unbounded stack allocation in usbredir (bsc#1186012)\n- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)\n- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)\n- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)\n- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)\n- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)\n- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)\n- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)\n- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)\n- CVE-2021-3682: usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145)\n- CVE-2020-35503: NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432)\n- CVE-2020-35504,CVE-2020-35505,CVE-2020-35506: NULL pointer dereference in ESP (bsc#1180433 bsc#1180434 bsc#1180435)\n- CVE-2021-20255: eepro100: stack overflow via infinite recursion (bsc#1182651)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1202",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1202-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1202-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1202-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7XTOHNMISPT4N5NUXQJPKV5LQNNGSMFI/"
},
{
"category": "self",
"summary": "SUSE Bug 1180432",
"url": "https://bugzilla.suse.com/1180432"
},
{
"category": "self",
"summary": "SUSE Bug 1180433",
"url": "https://bugzilla.suse.com/1180433"
},
{
"category": "self",
"summary": "SUSE Bug 1180434",
"url": "https://bugzilla.suse.com/1180434"
},
{
"category": "self",
"summary": "SUSE Bug 1180435",
"url": "https://bugzilla.suse.com/1180435"
},
{
"category": "self",
"summary": "SUSE Bug 1182651",
"url": "https://bugzilla.suse.com/1182651"
},
{
"category": "self",
"summary": "SUSE Bug 1186012",
"url": "https://bugzilla.suse.com/1186012"
},
{
"category": "self",
"summary": "SUSE Bug 1187364",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "self",
"summary": "SUSE Bug 1187365",
"url": "https://bugzilla.suse.com/1187365"
},
{
"category": "self",
"summary": "SUSE Bug 1187366",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "self",
"summary": "SUSE Bug 1187367",
"url": "https://bugzilla.suse.com/1187367"
},
{
"category": "self",
"summary": "SUSE Bug 1187499",
"url": "https://bugzilla.suse.com/1187499"
},
{
"category": "self",
"summary": "SUSE Bug 1187529",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "self",
"summary": "SUSE Bug 1187538",
"url": "https://bugzilla.suse.com/1187538"
},
{
"category": "self",
"summary": "SUSE Bug 1187539",
"url": "https://bugzilla.suse.com/1187539"
},
{
"category": "self",
"summary": "SUSE Bug 1189145",
"url": "https://bugzilla.suse.com/1189145"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35503 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35503/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35504 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35505 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35505/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-35506 page",
"url": "https://www.suse.com/security/cve/CVE-2020-35506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-20255 page",
"url": "https://www.suse.com/security/cve/CVE-2021-20255/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3527 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3595 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3607 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3608 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3682 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3682/"
}
],
"title": "Security update for qemu",
"tracking": {
"current_release_date": "2021-08-26T16:06:03Z",
"generator": {
"date": "2021-08-26T16:06:03Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1202-1",
"initial_release_date": "2021-08-26T16:06:03Z",
"revision_history": [
{
"date": "2021-08-26T16:06:03Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"product": {
"name": "qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"product_id": "qemu-ipxe-1.0.0+-lp152.9.20.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"product": {
"name": "qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"product_id": "qemu-microvm-4.2.1-lp152.9.20.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"product": {
"name": "qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"product_id": "qemu-seabios-1.12.1+-lp152.9.20.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-lp152.9.20.1.noarch",
"product": {
"name": "qemu-sgabios-8-lp152.9.20.1.noarch",
"product_id": "qemu-sgabios-8-lp152.9.20.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"product": {
"name": "qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"product_id": "qemu-vgabios-1.12.1+-lp152.9.20.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-arm-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-curl-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-extra-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ksm-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-kvm-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-lang-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-linux-user-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ppc-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-s390-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-testsuite-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-tools-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-x86-4.2.1-lp152.9.20.1.x86_64",
"product": {
"name": "qemu-x86-4.2.1-lp152.9.20.1.x86_64",
"product_id": "qemu-x86-4.2.1-lp152.9.20.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-arm-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-extra-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0+-lp152.9.20.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ksm-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-linux-user-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-microvm-4.2.1-lp152.9.20.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch"
},
"product_reference": "qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.12.1+-lp152.9.20.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch"
},
"product_reference": "qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-lp152.9.20.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch"
},
"product_reference": "qemu-sgabios-8-lp152.9.20.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-testsuite-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.12.1+-lp152.9.20.1.noarch as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch"
},
"product_reference": "qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-4.2.1-lp152.9.20.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
},
"product_reference": "qemu-x86-4.2.1-lp152.9.20.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-35503",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35503"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35503",
"url": "https://www.suse.com/security/cve/CVE-2020-35503"
},
{
"category": "external",
"summary": "SUSE Bug 1180432 for CVE-2020-35503",
"url": "https://bugzilla.suse.com/1180432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2020-35503"
},
{
"cve": "CVE-2020-35504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35504"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35504",
"url": "https://www.suse.com/security/cve/CVE-2020-35504"
},
{
"category": "external",
"summary": "SUSE Bug 1180433 for CVE-2020-35504",
"url": "https://bugzilla.suse.com/1180433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2020-35504"
},
{
"cve": "CVE-2020-35505",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35505"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the \u0027Information Transfer\u0027 command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35505",
"url": "https://www.suse.com/security/cve/CVE-2020-35505"
},
{
"category": "external",
"summary": "SUSE Bug 1180434 for CVE-2020-35505",
"url": "https://bugzilla.suse.com/1180434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2020-35505"
},
{
"cve": "CVE-2020-35506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-35506"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the \u0027Information Transfer\u0027 command (CMD_TI). This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service or potential code execution with the privileges of the QEMU process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-35506",
"url": "https://www.suse.com/security/cve/CVE-2020-35506"
},
{
"category": "external",
"summary": "SUSE Bug 1180435 for CVE-2020-35506",
"url": "https://bugzilla.suse.com/1180435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2020-35506"
},
{
"cve": "CVE-2021-20255",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-20255"
}
],
"notes": [
{
"category": "general",
"text": "A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-20255",
"url": "https://www.suse.com/security/cve/CVE-2021-20255"
},
{
"category": "external",
"summary": "SUSE Bug 1182651 for CVE-2021-20255",
"url": "https://bugzilla.suse.com/1182651"
},
{
"category": "external",
"summary": "SUSE Bug 1182654 for CVE-2021-20255",
"url": "https://bugzilla.suse.com/1182654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-20255"
},
{
"cve": "CVE-2021-3527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3527"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3527",
"url": "https://www.suse.com/security/cve/CVE-2021-3527"
},
{
"category": "external",
"summary": "SUSE Bug 1186012 for CVE-2021-3527",
"url": "https://bugzilla.suse.com/1186012"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3527"
},
{
"cve": "CVE-2021-3582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3582"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device. The issue occurs while handling a \"PVRDMA_CMD_CREATE_MR\" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3582",
"url": "https://www.suse.com/security/cve/CVE-2021-3582"
},
{
"category": "external",
"summary": "SUSE Bug 1187499 for CVE-2021-3582",
"url": "https://bugzilla.suse.com/1187499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3582"
},
{
"cve": "CVE-2021-3592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3592"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027bootp_t\u0027 structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3592",
"url": "https://www.suse.com/security/cve/CVE-2021-3592"
},
{
"category": "external",
"summary": "SUSE Bug 1187364 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "external",
"summary": "SUSE Bug 1187369 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187369"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3592"
},
{
"cve": "CVE-2021-3593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3593"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3593",
"url": "https://www.suse.com/security/cve/CVE-2021-3593"
},
{
"category": "external",
"summary": "SUSE Bug 1187365 for CVE-2021-3593",
"url": "https://bugzilla.suse.com/1187365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3593"
},
{
"cve": "CVE-2021-3594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3594"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3594",
"url": "https://www.suse.com/security/cve/CVE-2021-3594"
},
{
"category": "external",
"summary": "SUSE Bug 1187367 for CVE-2021-3594",
"url": "https://bugzilla.suse.com/1187367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3594"
},
{
"cve": "CVE-2021-3595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3595"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027tftp_t\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3595",
"url": "https://www.suse.com/security/cve/CVE-2021-3595"
},
{
"category": "external",
"summary": "SUSE Bug 1187366 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "external",
"summary": "SUSE Bug 1187376 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3595"
},
{
"cve": "CVE-2021-3607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3607"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3607",
"url": "https://www.suse.com/security/cve/CVE-2021-3607"
},
{
"category": "external",
"summary": "SUSE Bug 1187539 for CVE-2021-3607",
"url": "https://bugzilla.suse.com/1187539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3607"
},
{
"cve": "CVE-2021-3608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3608"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3608",
"url": "https://www.suse.com/security/cve/CVE-2021-3608"
},
{
"category": "external",
"summary": "SUSE Bug 1187538 for CVE-2021-3608",
"url": "https://bugzilla.suse.com/1187538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "low"
}
],
"title": "CVE-2021-3608"
},
{
"cve": "CVE-2021-3611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3611"
}
],
"notes": [
{
"category": "general",
"text": "A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3611",
"url": "https://www.suse.com/security/cve/CVE-2021-3611"
},
{
"category": "external",
"summary": "SUSE Bug 1187529 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "external",
"summary": "SUSE Bug 1193914 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1193914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2021-3611"
},
{
"cve": "CVE-2021-3682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3682"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3682",
"url": "https://www.suse.com/security/cve/CVE-2021-3682"
},
{
"category": "external",
"summary": "SUSE Bug 1189145 for CVE-2021-3682",
"url": "https://bugzilla.suse.com/1189145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:qemu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-arm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-alsa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-pa-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-audio-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-curl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-dmg-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-gluster-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-iscsi-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-nfs-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-rbd-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-block-ssh-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-extra-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-guest-agent-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ipxe-1.0.0+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ksm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-kvm-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-lang-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-linux-user-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-microvm-4.2.1-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-ppc-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-s390-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-seabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-sgabios-8-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-testsuite-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-tools-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-curses-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-gtk-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-sdl-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-ui-spice-app-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-vgabios-1.12.1+-lp152.9.20.1.noarch",
"openSUSE Leap 15.2:qemu-vhost-user-gpu-4.2.1-lp152.9.20.1.x86_64",
"openSUSE Leap 15.2:qemu-x86-4.2.1-lp152.9.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-26T16:06:03Z",
"details": "moderate"
}
],
"title": "CVE-2021-3682"
}
]
}
OPENSUSE-SU-2021:2474-1
Vulnerability from csaf_opensuse - Published: 2021-07-27 09:41 - Updated: 2021-07-27 09:41Summary
Security update for qemu
Severity
Important
Notes
Title of the patch: Security update for qemu
Description of the patch: This update for qemu fixes the following issues:
Security issues fixed:
- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
Patchnames: openSUSE-SLE-15.3-2021-2474
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
39 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1187364 | self |
| https://bugzilla.suse.com/1187365 | self |
| https://bugzilla.suse.com/1187366 | self |
| https://bugzilla.suse.com/1187367 | self |
| https://bugzilla.suse.com/1187499 | self |
| https://bugzilla.suse.com/1187529 | self |
| https://bugzilla.suse.com/1187538 | self |
| https://bugzilla.suse.com/1187539 | self |
| https://www.suse.com/security/cve/CVE-2021-3582/ | self |
| https://www.suse.com/security/cve/CVE-2021-3592/ | self |
| https://www.suse.com/security/cve/CVE-2021-3593/ | self |
| https://www.suse.com/security/cve/CVE-2021-3594/ | self |
| https://www.suse.com/security/cve/CVE-2021-3595/ | self |
| https://www.suse.com/security/cve/CVE-2021-3607/ | self |
| https://www.suse.com/security/cve/CVE-2021-3608/ | self |
| https://www.suse.com/security/cve/CVE-2021-3611/ | self |
| https://www.suse.com/security/cve/CVE-2021-3582 | external |
| https://bugzilla.suse.com/1187499 | external |
| https://www.suse.com/security/cve/CVE-2021-3592 | external |
| https://bugzilla.suse.com/1187364 | external |
| https://bugzilla.suse.com/1187369 | external |
| https://www.suse.com/security/cve/CVE-2021-3593 | external |
| https://bugzilla.suse.com/1187365 | external |
| https://www.suse.com/security/cve/CVE-2021-3594 | external |
| https://bugzilla.suse.com/1187367 | external |
| https://www.suse.com/security/cve/CVE-2021-3595 | external |
| https://bugzilla.suse.com/1187366 | external |
| https://bugzilla.suse.com/1187376 | external |
| https://www.suse.com/security/cve/CVE-2021-3607 | external |
| https://bugzilla.suse.com/1187539 | external |
| https://www.suse.com/security/cve/CVE-2021-3608 | external |
| https://bugzilla.suse.com/1187538 | external |
| https://www.suse.com/security/cve/CVE-2021-3611 | external |
| https://bugzilla.suse.com/1187529 | external |
| https://bugzilla.suse.com/1193914 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for qemu",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)\n- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)\n- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)\n- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)\n- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)\n- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)\n- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)\n- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2474",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2474-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2474-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LOEJDVTTKRPTW4JLAPXEN46YAGYFJMDT/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2474-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LOEJDVTTKRPTW4JLAPXEN46YAGYFJMDT/"
},
{
"category": "self",
"summary": "SUSE Bug 1187364",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "self",
"summary": "SUSE Bug 1187365",
"url": "https://bugzilla.suse.com/1187365"
},
{
"category": "self",
"summary": "SUSE Bug 1187366",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "self",
"summary": "SUSE Bug 1187367",
"url": "https://bugzilla.suse.com/1187367"
},
{
"category": "self",
"summary": "SUSE Bug 1187499",
"url": "https://bugzilla.suse.com/1187499"
},
{
"category": "self",
"summary": "SUSE Bug 1187529",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "self",
"summary": "SUSE Bug 1187538",
"url": "https://bugzilla.suse.com/1187538"
},
{
"category": "self",
"summary": "SUSE Bug 1187539",
"url": "https://bugzilla.suse.com/1187539"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3595 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3607 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3608 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3611/"
}
],
"title": "Security update for qemu",
"tracking": {
"current_release_date": "2021-07-27T09:41:19Z",
"generator": {
"date": "2021-07-27T09:41:19Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2474-1",
"initial_release_date": "2021-07-27T09:41:19Z",
"revision_history": [
{
"date": "2021-07-27T09:41:19Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-s390-4.2.1-11.25.2.aarch64",
"product": {
"name": "qemu-s390-4.2.1-11.25.2.aarch64",
"product_id": "qemu-s390-4.2.1-11.25.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-s390-4.2.1-11.25.2.ppc64le",
"product": {
"name": "qemu-s390-4.2.1-11.25.2.ppc64le",
"product_id": "qemu-s390-4.2.1-11.25.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-s390-4.2.1-11.25.2.s390x",
"product": {
"name": "qemu-s390-4.2.1-11.25.2.s390x",
"product_id": "qemu-s390-4.2.1-11.25.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-s390-4.2.1-11.25.2.x86_64",
"product": {
"name": "qemu-s390-4.2.1-11.25.2.x86_64",
"product_id": "qemu-s390-4.2.1-11.25.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-4.2.1-11.25.2.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64"
},
"product_reference": "qemu-s390-4.2.1-11.25.2.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-4.2.1-11.25.2.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le"
},
"product_reference": "qemu-s390-4.2.1-11.25.2.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-4.2.1-11.25.2.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x"
},
"product_reference": "qemu-s390-4.2.1-11.25.2.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-4.2.1-11.25.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
},
"product_reference": "qemu-s390-4.2.1-11.25.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3582"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device. The issue occurs while handling a \"PVRDMA_CMD_CREATE_MR\" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3582",
"url": "https://www.suse.com/security/cve/CVE-2021-3582"
},
{
"category": "external",
"summary": "SUSE Bug 1187499 for CVE-2021-3582",
"url": "https://bugzilla.suse.com/1187499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3582"
},
{
"cve": "CVE-2021-3592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3592"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027bootp_t\u0027 structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3592",
"url": "https://www.suse.com/security/cve/CVE-2021-3592"
},
{
"category": "external",
"summary": "SUSE Bug 1187364 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "external",
"summary": "SUSE Bug 1187369 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187369"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3592"
},
{
"cve": "CVE-2021-3593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3593"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3593",
"url": "https://www.suse.com/security/cve/CVE-2021-3593"
},
{
"category": "external",
"summary": "SUSE Bug 1187365 for CVE-2021-3593",
"url": "https://bugzilla.suse.com/1187365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3593"
},
{
"cve": "CVE-2021-3594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3594"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3594",
"url": "https://www.suse.com/security/cve/CVE-2021-3594"
},
{
"category": "external",
"summary": "SUSE Bug 1187367 for CVE-2021-3594",
"url": "https://bugzilla.suse.com/1187367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3594"
},
{
"cve": "CVE-2021-3595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3595"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027tftp_t\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3595",
"url": "https://www.suse.com/security/cve/CVE-2021-3595"
},
{
"category": "external",
"summary": "SUSE Bug 1187366 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "external",
"summary": "SUSE Bug 1187376 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3595"
},
{
"cve": "CVE-2021-3607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3607"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3607",
"url": "https://www.suse.com/security/cve/CVE-2021-3607"
},
{
"category": "external",
"summary": "SUSE Bug 1187539 for CVE-2021-3607",
"url": "https://bugzilla.suse.com/1187539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3607"
},
{
"cve": "CVE-2021-3608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3608"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3608",
"url": "https://www.suse.com/security/cve/CVE-2021-3608"
},
{
"category": "external",
"summary": "SUSE Bug 1187538 for CVE-2021-3608",
"url": "https://bugzilla.suse.com/1187538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "low"
}
],
"title": "CVE-2021-3608"
},
{
"cve": "CVE-2021-3611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3611"
}
],
"notes": [
{
"category": "general",
"text": "A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3611",
"url": "https://www.suse.com/security/cve/CVE-2021-3611"
},
{
"category": "external",
"summary": "SUSE Bug 1187529 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "external",
"summary": "SUSE Bug 1193914 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1193914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.aarch64",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.ppc64le",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.s390x",
"openSUSE Leap 15.3:qemu-s390-4.2.1-11.25.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-27T09:41:19Z",
"details": "moderate"
}
],
"title": "CVE-2021-3611"
}
]
}
OPENSUSE-SU-2021:2591-1
Vulnerability from csaf_opensuse - Published: 2021-08-02 10:56 - Updated: 2021-08-02 10:56Summary
Security update for qemu
Severity
Important
Notes
Title of the patch: Security update for qemu
Description of the patch: This update for qemu fixes the following issues:
Security issues fixed:
- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)
- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)
- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)
- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)
- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)
- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)
- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)
- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)
- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)
Other issues fixed:
- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
Patchnames: openSUSE-SLE-15.3-2021-2591
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
46 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1176681 | self |
| https://bugzilla.suse.com/1185591 | self |
| https://bugzilla.suse.com/1186290 | self |
| https://bugzilla.suse.com/1187364 | self |
| https://bugzilla.suse.com/1187365 | self |
| https://bugzilla.suse.com/1187366 | self |
| https://bugzilla.suse.com/1187367 | self |
| https://bugzilla.suse.com/1187499 | self |
| https://bugzilla.suse.com/1187529 | self |
| https://bugzilla.suse.com/1187538 | self |
| https://bugzilla.suse.com/1187539 | self |
| https://www.suse.com/security/cve/CVE-2020-25085/ | self |
| https://www.suse.com/security/cve/CVE-2021-3582/ | self |
| https://www.suse.com/security/cve/CVE-2021-3592/ | self |
| https://www.suse.com/security/cve/CVE-2021-3593/ | self |
| https://www.suse.com/security/cve/CVE-2021-3594/ | self |
| https://www.suse.com/security/cve/CVE-2021-3595/ | self |
| https://www.suse.com/security/cve/CVE-2021-3607/ | self |
| https://www.suse.com/security/cve/CVE-2021-3608/ | self |
| https://www.suse.com/security/cve/CVE-2021-3611/ | self |
| https://www.suse.com/security/cve/CVE-2020-25085 | external |
| https://bugzilla.suse.com/1176681 | external |
| https://bugzilla.suse.com/1182282 | external |
| https://www.suse.com/security/cve/CVE-2021-3582 | external |
| https://bugzilla.suse.com/1187499 | external |
| https://www.suse.com/security/cve/CVE-2021-3592 | external |
| https://bugzilla.suse.com/1187364 | external |
| https://bugzilla.suse.com/1187369 | external |
| https://www.suse.com/security/cve/CVE-2021-3593 | external |
| https://bugzilla.suse.com/1187365 | external |
| https://www.suse.com/security/cve/CVE-2021-3594 | external |
| https://bugzilla.suse.com/1187367 | external |
| https://www.suse.com/security/cve/CVE-2021-3595 | external |
| https://bugzilla.suse.com/1187366 | external |
| https://bugzilla.suse.com/1187376 | external |
| https://www.suse.com/security/cve/CVE-2021-3607 | external |
| https://bugzilla.suse.com/1187539 | external |
| https://www.suse.com/security/cve/CVE-2021-3608 | external |
| https://bugzilla.suse.com/1187538 | external |
| https://www.suse.com/security/cve/CVE-2021-3611 | external |
| https://bugzilla.suse.com/1187529 | external |
| https://bugzilla.suse.com/1193914 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for qemu",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-3595: Fixed slirp: invalid pointer initialization may lead to information disclosure (tftp) (bsc#1187366)\n- CVE-2021-3592: Fix for slirp: invalid pointer initialization may lead to information disclosure (bootp) (bsc#1187364)\n- CVE-2021-3594: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp) (bsc#1187367)\n- CVE-2021-3593: Fix for slirp: invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365)\n- CVE-2021-3582: Fix possible mremap overflow in the pvrdma (bsc#1187499)\n- CVE-2021-3607: Ensure correct input on ring init (bsc#1187539)\n- CVE-2021-3608: Fix the ring init error flow (bsc#1187538)\n- CVE-2021-3611: Fix intel-hda segmentation fault due to stack overflow (bsc#1187529)\n- CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)\n\nOther issues fixed:\n\n- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)\n- Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2021-2591",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2591-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:2591-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3DOLLXJN6UCIAFW2F6437T6CGXJTVQO/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:2591-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W3DOLLXJN6UCIAFW2F6437T6CGXJTVQO/"
},
{
"category": "self",
"summary": "SUSE Bug 1176681",
"url": "https://bugzilla.suse.com/1176681"
},
{
"category": "self",
"summary": "SUSE Bug 1185591",
"url": "https://bugzilla.suse.com/1185591"
},
{
"category": "self",
"summary": "SUSE Bug 1186290",
"url": "https://bugzilla.suse.com/1186290"
},
{
"category": "self",
"summary": "SUSE Bug 1187364",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "self",
"summary": "SUSE Bug 1187365",
"url": "https://bugzilla.suse.com/1187365"
},
{
"category": "self",
"summary": "SUSE Bug 1187366",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "self",
"summary": "SUSE Bug 1187367",
"url": "https://bugzilla.suse.com/1187367"
},
{
"category": "self",
"summary": "SUSE Bug 1187499",
"url": "https://bugzilla.suse.com/1187499"
},
{
"category": "self",
"summary": "SUSE Bug 1187529",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "self",
"summary": "SUSE Bug 1187538",
"url": "https://bugzilla.suse.com/1187538"
},
{
"category": "self",
"summary": "SUSE Bug 1187539",
"url": "https://bugzilla.suse.com/1187539"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-25085 page",
"url": "https://www.suse.com/security/cve/CVE-2020-25085/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3595 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3607 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3608 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3611/"
}
],
"title": "Security update for qemu",
"tracking": {
"current_release_date": "2021-08-02T10:56:22Z",
"generator": {
"date": "2021-08-02T10:56:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:2591-1",
"initial_release_date": "2021-08-02T10:56:22Z",
"revision_history": [
{
"date": "2021-08-02T10:56:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-audio-oss-3.1.1.1-9.30.2.x86_64",
"product": {
"name": "qemu-audio-oss-3.1.1.1-9.30.2.x86_64",
"product_id": "qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-audio-oss-3.1.1.1-9.30.2.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
},
"product_reference": "qemu-audio-oss-3.1.1.1-9.30.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-25085",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-25085"
}
],
"notes": [
{
"category": "general",
"text": "QEMU 5.0.0 has a heap-based Buffer Overflow in flatview_read_continue in exec.c because hw/sd/sdhci.c mishandles a write operation in the SDHC_BLKSIZE case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-25085",
"url": "https://www.suse.com/security/cve/CVE-2020-25085"
},
{
"category": "external",
"summary": "SUSE Bug 1176681 for CVE-2020-25085",
"url": "https://bugzilla.suse.com/1176681"
},
{
"category": "external",
"summary": "SUSE Bug 1182282 for CVE-2020-25085",
"url": "https://bugzilla.suse.com/1182282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "moderate"
}
],
"title": "CVE-2020-25085"
},
{
"cve": "CVE-2021-3582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3582"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device. The issue occurs while handling a \"PVRDMA_CMD_CREATE_MR\" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3582",
"url": "https://www.suse.com/security/cve/CVE-2021-3582"
},
{
"category": "external",
"summary": "SUSE Bug 1187499 for CVE-2021-3582",
"url": "https://bugzilla.suse.com/1187499"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3582"
},
{
"cve": "CVE-2021-3592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3592"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027bootp_t\u0027 structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3592",
"url": "https://www.suse.com/security/cve/CVE-2021-3592"
},
{
"category": "external",
"summary": "SUSE Bug 1187364 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187364"
},
{
"category": "external",
"summary": "SUSE Bug 1187369 for CVE-2021-3592",
"url": "https://bugzilla.suse.com/1187369"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3592"
},
{
"cve": "CVE-2021-3593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3593"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3593",
"url": "https://www.suse.com/security/cve/CVE-2021-3593"
},
{
"category": "external",
"summary": "SUSE Bug 1187365 for CVE-2021-3593",
"url": "https://bugzilla.suse.com/1187365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3593"
},
{
"cve": "CVE-2021-3594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3594"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3594",
"url": "https://www.suse.com/security/cve/CVE-2021-3594"
},
{
"category": "external",
"summary": "SUSE Bug 1187367 for CVE-2021-3594",
"url": "https://bugzilla.suse.com/1187367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3594"
},
{
"cve": "CVE-2021-3595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3595"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027tftp_t\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3595",
"url": "https://www.suse.com/security/cve/CVE-2021-3595"
},
{
"category": "external",
"summary": "SUSE Bug 1187366 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187366"
},
{
"category": "external",
"summary": "SUSE Bug 1187376 for CVE-2021-3595",
"url": "https://bugzilla.suse.com/1187376"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3595"
},
{
"cve": "CVE-2021-3607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3607"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3607",
"url": "https://www.suse.com/security/cve/CVE-2021-3607"
},
{
"category": "external",
"summary": "SUSE Bug 1187539 for CVE-2021-3607",
"url": "https://bugzilla.suse.com/1187539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3607"
},
{
"cve": "CVE-2021-3608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3608"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the QEMU implementation of VMWare\u0027s paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a \"PVRDMA_REG_DSRHIGH\" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3608",
"url": "https://www.suse.com/security/cve/CVE-2021-3608"
},
{
"category": "external",
"summary": "SUSE Bug 1187538 for CVE-2021-3608",
"url": "https://bugzilla.suse.com/1187538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "low"
}
],
"title": "CVE-2021-3608"
},
{
"cve": "CVE-2021-3611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3611"
}
],
"notes": [
{
"category": "general",
"text": "A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3611",
"url": "https://www.suse.com/security/cve/CVE-2021-3611"
},
{
"category": "external",
"summary": "SUSE Bug 1187529 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "external",
"summary": "SUSE Bug 1193914 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1193914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:qemu-audio-oss-3.1.1.1-9.30.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-02T10:56:22Z",
"details": "moderate"
}
],
"title": "CVE-2021-3611"
}
]
}
OPENSUSE-SU-2022:2941-1
Vulnerability from csaf_opensuse - Published: 2022-08-30 08:51 - Updated: 2022-08-30 08:51Summary
Security update for libslirp
Severity
Moderate
Notes
Title of the patch: Security update for libslirp
Description of the patch: This update for libslirp fixes the following issues:
- CVE-2021-3593: Fixed invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365).
Non-security fixes:
- Fix the version header (bsc#1201551)
Patchnames: openSUSE-Leap-Micro-5.2-2022-2941
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
References
9 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1187365 | self |
| https://bugzilla.suse.com/1201551 | self |
| https://www.suse.com/security/cve/CVE-2021-3593/ | self |
| https://www.suse.com/security/cve/CVE-2021-3593 | external |
| https://bugzilla.suse.com/1187365 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for libslirp",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for libslirp fixes the following issues:\n\n- CVE-2021-3593: Fixed invalid pointer initialization may lead to information disclosure (udp6) (bsc#1187365).\n\nNon-security fixes:\n\n- Fix the version header (bsc#1201551)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-Micro-5.2-2022-2941",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_2941-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2022:2941-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3NSGF4F642R2SF6X757XAA52XDMHLLL3/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2022:2941-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3NSGF4F642R2SF6X757XAA52XDMHLLL3/"
},
{
"category": "self",
"summary": "SUSE Bug 1187365",
"url": "https://bugzilla.suse.com/1187365"
},
{
"category": "self",
"summary": "SUSE Bug 1201551",
"url": "https://bugzilla.suse.com/1201551"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3593/"
}
],
"title": "Security update for libslirp",
"tracking": {
"current_release_date": "2022-08-30T08:51:38Z",
"generator": {
"date": "2022-08-30T08:51:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2022:2941-1",
"initial_release_date": "2022-08-30T08:51:38Z",
"revision_history": [
{
"date": "2022-08-30T08:51:38Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libslirp0-4.3.1-150300.11.1.aarch64",
"product": {
"name": "libslirp0-4.3.1-150300.11.1.aarch64",
"product_id": "libslirp0-4.3.1-150300.11.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libslirp0-4.3.1-150300.11.1.x86_64",
"product": {
"name": "libslirp0-4.3.1-150300.11.1.x86_64",
"product_id": "libslirp0-4.3.1-150300.11.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.2",
"product": {
"name": "openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp0-4.3.1-150300.11.1.aarch64 as component of openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.aarch64"
},
"product_reference": "libslirp0-4.3.1-150300.11.1.aarch64",
"relates_to_product_reference": "openSUSE Leap Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libslirp0-4.3.1-150300.11.1.x86_64 as component of openSUSE Leap Micro 5.2",
"product_id": "openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.x86_64"
},
"product_reference": "libslirp0-4.3.1-150300.11.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3593"
}
],
"notes": [
{
"category": "general",
"text": "An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the \u0027udphdr\u0027 structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.aarch64",
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3593",
"url": "https://www.suse.com/security/cve/CVE-2021-3593"
},
{
"category": "external",
"summary": "SUSE Bug 1187365 for CVE-2021-3593",
"url": "https://bugzilla.suse.com/1187365"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.aarch64",
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.aarch64",
"openSUSE Leap Micro 5.2:libslirp0-4.3.1-150300.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-08-30T08:51:38Z",
"details": "low"
}
],
"title": "CVE-2021-3593"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…