Vulnerability-Lookup

OPENSUSE-SU-2024:11287-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

qemu-6.1.0-32.1 on GA media

Severity

Moderate

Notes

Title of the patch: qemu-6.1.0-32.1 on GA media

Description of the patch: These are all security issues fixed in the qemu-6.1.0-32.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-11287

CVE-2014-0222

Affected products

Recommended 188 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:qemu-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-qtest-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-qtest-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-qtest-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-qtest-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-tcg-x86-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-tcg-x86-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-tcg-x86-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-accel-tcg-x86-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-arm-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-arm-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-arm-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-arm-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-alsa-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-alsa-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-alsa-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-alsa-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-jack-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-jack-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-jack-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-jack-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-pa-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-pa-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-pa-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-pa-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-spice-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-spice-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-spice-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-audio-spice-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-curl-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-curl-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-curl-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-curl-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-dmg-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-dmg-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-dmg-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-dmg-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-gluster-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-gluster-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-gluster-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-gluster-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-iscsi-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-iscsi-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-iscsi-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-iscsi-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-nfs-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-nfs-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-nfs-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-nfs-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-rbd-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-rbd-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-rbd-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-rbd-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-ssh-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-ssh-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-ssh-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-block-ssh-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-baum-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-baum-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-baum-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-baum-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-spice-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-spice-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-spice-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-chardev-spice-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-extra-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-extra-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-extra-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-extra-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-guest-agent-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-guest-agent-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-guest-agent-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-guest-agent-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-qxl-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-qxl-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-qxl-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-qxl-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-gpu-pci-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-vga-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-vga-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-vga-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-display-virtio-vga-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-s390x-virtio-gpu-ccw-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-host-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-host-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-host-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-host-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-redirect-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-redirect-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-redirect-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-redirect-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-smartcard-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-smartcard-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-smartcard-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-hw-usb-smartcard-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ipxe-1.0.0+-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ipxe-1.0.0+-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ipxe-1.0.0+-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ipxe-1.0.0+-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ivshmem-tools-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ivshmem-tools-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ivshmem-tools-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ivshmem-tools-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ksm-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ksm-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ksm-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ksm-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-kvm-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-kvm-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-kvm-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-kvm-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-lang-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-lang-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-lang-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-lang-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-microvm-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-microvm-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-microvm-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-microvm-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ppc-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ppc-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ppc-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ppc-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-s390x-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-s390x-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-s390x-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-s390x-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-seabios-1.14.0_0_g155821a-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-seabios-1.14.0_0_g155821a-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-seabios-1.14.0_0_g155821a-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-seabios-1.14.0_0_g155821a-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-sgabios-8-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-sgabios-8-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-sgabios-8-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-sgabios-8-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-skiboot-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-skiboot-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-skiboot-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-skiboot-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-tools-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-tools-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-tools-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-tools-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-curses-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-curses-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-curses-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-curses-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-gtk-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-gtk-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-gtk-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-gtk-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-opengl-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-opengl-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-opengl-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-opengl-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-app-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-app-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-app-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-app-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-core-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-core-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-core-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-ui-spice-core-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vgabios-1.14.0_0_g155821a-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vgabios-1.14.0_0_g155821a-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vgabios-1.14.0_0_g155821a-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vgabios-1.14.0_0_g155821a-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vhost-user-gpu-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vhost-user-gpu-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vhost-user-gpu-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-vhost-user-gpu-6.1.0-32.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-x86-6.1.0-32.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-x86-6.1.0-32.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-x86-6.1.0-32.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:qemu-x86-6.1.0-32.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2014-8106

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2015-5225

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2015-6855

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2015-8504

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2015-8619

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2016-10028

5.4 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-10155

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-1714

8.1 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-6490

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-6836

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-7156

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7157

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7161

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7170

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7421

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-7422

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7423

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7466

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7907

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7908

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7909

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7994

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-7995

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8576

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8577

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8578

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8667

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8668

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8669

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-8909

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-8910

3 (Low)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9101

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9102

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-9103

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9104

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9105

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9106

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9602

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2016-9907

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2016-9921

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-10664

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-10806

5.9 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-11334

6.2 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-11434

8.6 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2017-13673

3 (Low)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-13711

4 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-14167

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-15038

3 (Low)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-15118

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact critical

CVE-2017-15268

5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-15289

6 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-2615

5.5 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-2620

9.9 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-2630

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-5525

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5526

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5552

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5578

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5579

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5667

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-5715

7.1 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2017-5856

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5857

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5898

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-5973

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-6058

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2017-7471

9 (Critical)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2017-7493

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2017-8112

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-8309

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-8379

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-8380

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-9503

3.8 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2017-9524

5.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-10839

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-11806

5 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-12126

3.8 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-12130

6.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-12207

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-15746

5.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-16872

5 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-17963

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-20123

3.2 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2018-20124

5.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-20125

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2018-20126

3.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2018-20191

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2018-20216

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2018-20815

7 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-3639

4.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2018-7858

5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2019-03812

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2019-11135

6.5 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2019-12155

3.8 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2019-13164

4.7 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2019-14378

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2019-15890

5.8 (Medium)


                
                  CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2019-6778

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2019-8934

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2019-9824

2.8 (Low)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-10702

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-10717

3.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-10761

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2020-11102

8.4 (High)


                
                  CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2020-11869

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-13361

3.9 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-13362

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-13659

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-13800

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-14364

5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-16092

3.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-1711

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2020-17380

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-1983

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2020-25085

5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-25723

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-27821

5.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-29129

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2020-7039

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2020-8608

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2021-20181

7.5 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact important

CVE-2021-20203

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-20221

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2021-20257

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-20263

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3416

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3527

3.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3544

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2021-3545

5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2021-3546

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

CVE-2021-3582

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3607

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3608

3.2 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact low

CVE-2021-3682

6 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected products

Recommended 188 products, the same list as for CVE-2014-0222

Threats

Impact moderate

References

585 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2014-0222/	self
https://www.suse.com/security/cve/CVE-2014-8106/	self
https://www.suse.com/security/cve/CVE-2015-5225/	self
https://www.suse.com/security/cve/CVE-2015-6855/	self
https://www.suse.com/security/cve/CVE-2015-8504/	self
https://www.suse.com/security/cve/CVE-2015-8619/	self
https://www.suse.com/security/cve/CVE-2016-10028/	self
https://www.suse.com/security/cve/CVE-2016-10155/	self
https://www.suse.com/security/cve/CVE-2016-1714/	self
https://www.suse.com/security/cve/CVE-2016-6490/	self
https://www.suse.com/security/cve/CVE-2016-6836/	self
https://www.suse.com/security/cve/CVE-2016-7156/	self
https://www.suse.com/security/cve/CVE-2016-7157/	self
https://www.suse.com/security/cve/CVE-2016-7161/	self
https://www.suse.com/security/cve/CVE-2016-7170/	self
https://www.suse.com/security/cve/CVE-2016-7421/	self
https://www.suse.com/security/cve/CVE-2016-7422/	self
https://www.suse.com/security/cve/CVE-2016-7423/	self
https://www.suse.com/security/cve/CVE-2016-7466/	self
https://www.suse.com/security/cve/CVE-2016-7907/	self
https://www.suse.com/security/cve/CVE-2016-7908/	self
https://www.suse.com/security/cve/CVE-2016-7909/	self
https://www.suse.com/security/cve/CVE-2016-7994/	self
https://www.suse.com/security/cve/CVE-2016-7995/	self
https://www.suse.com/security/cve/CVE-2016-8576/	self
https://www.suse.com/security/cve/CVE-2016-8577/	self
https://www.suse.com/security/cve/CVE-2016-8578/	self
https://www.suse.com/security/cve/CVE-2016-8667/	self
https://www.suse.com/security/cve/CVE-2016-8668/	self
https://www.suse.com/security/cve/CVE-2016-8669/	self
https://www.suse.com/security/cve/CVE-2016-8909/	self
https://www.suse.com/security/cve/CVE-2016-8910/	self
https://www.suse.com/security/cve/CVE-2016-9101/	self
https://www.suse.com/security/cve/CVE-2016-9102/	self
https://www.suse.com/security/cve/CVE-2016-9103/	self
https://www.suse.com/security/cve/CVE-2016-9104/	self
https://www.suse.com/security/cve/CVE-2016-9105/	self
https://www.suse.com/security/cve/CVE-2016-9106/	self
https://www.suse.com/security/cve/CVE-2016-9602/	self
https://www.suse.com/security/cve/CVE-2016-9907/	self
https://www.suse.com/security/cve/CVE-2016-9921/	self
https://www.suse.com/security/cve/CVE-2017-10664/	self
https://www.suse.com/security/cve/CVE-2017-10806/	self
https://www.suse.com/security/cve/CVE-2017-11334/	self
https://www.suse.com/security/cve/CVE-2017-11434/	self
https://www.suse.com/security/cve/CVE-2017-13673/	self
https://www.suse.com/security/cve/CVE-2017-13711/	self
https://www.suse.com/security/cve/CVE-2017-14167/	self
https://www.suse.com/security/cve/CVE-2017-15038/	self
https://www.suse.com/security/cve/CVE-2017-15118/	self
https://www.suse.com/security/cve/CVE-2017-15268/	self
https://www.suse.com/security/cve/CVE-2017-15289/	self
https://www.suse.com/security/cve/CVE-2017-2615/	self
https://www.suse.com/security/cve/CVE-2017-2620/	self
https://www.suse.com/security/cve/CVE-2017-2630/	self
https://www.suse.com/security/cve/CVE-2017-5525/	self
https://www.suse.com/security/cve/CVE-2017-5526/	self
https://www.suse.com/security/cve/CVE-2017-5552/	self
https://www.suse.com/security/cve/CVE-2017-5578/	self
https://www.suse.com/security/cve/CVE-2017-5579/	self
https://www.suse.com/security/cve/CVE-2017-5667/	self
https://www.suse.com/security/cve/CVE-2017-5715/	self
https://www.suse.com/security/cve/CVE-2017-5856/	self
https://www.suse.com/security/cve/CVE-2017-5857/	self
https://www.suse.com/security/cve/CVE-2017-5898/	self
https://www.suse.com/security/cve/CVE-2017-5973/	self
https://www.suse.com/security/cve/CVE-2017-6058/	self
https://www.suse.com/security/cve/CVE-2017-7471/	self
https://www.suse.com/security/cve/CVE-2017-7493/	self
https://www.suse.com/security/cve/CVE-2017-8112/	self
https://www.suse.com/security/cve/CVE-2017-8309/	self
https://www.suse.com/security/cve/CVE-2017-8379/	self
https://www.suse.com/security/cve/CVE-2017-8380/	self
https://www.suse.com/security/cve/CVE-2017-9503/	self
https://www.suse.com/security/cve/CVE-2017-9524/	self
https://www.suse.com/security/cve/CVE-2018-10839/	self
https://www.suse.com/security/cve/CVE-2018-11806/	self
https://www.suse.com/security/cve/CVE-2018-12126/	self
https://www.suse.com/security/cve/CVE-2018-12130/	self
https://www.suse.com/security/cve/CVE-2018-12207/	self
https://www.suse.com/security/cve/CVE-2018-15746/	self
https://www.suse.com/security/cve/CVE-2018-16872/	self
https://www.suse.com/security/cve/CVE-2018-17963/	self
https://www.suse.com/security/cve/CVE-2018-20123/	self
https://www.suse.com/security/cve/CVE-2018-20124/	self
https://www.suse.com/security/cve/CVE-2018-20125/	self
https://www.suse.com/security/cve/CVE-2018-20126/	self
https://www.suse.com/security/cve/CVE-2018-20191/	self
https://www.suse.com/security/cve/CVE-2018-20216/	self
https://www.suse.com/security/cve/CVE-2018-20815/	self
https://www.suse.com/security/cve/CVE-2018-3639/	self
https://www.suse.com/security/cve/CVE-2018-7858/	self
https://www.suse.com/security/cve/CVE-2019-03812/	self
https://www.suse.com/security/cve/CVE-2019-11135/	self
https://www.suse.com/security/cve/CVE-2019-12155/	self
https://www.suse.com/security/cve/CVE-2019-13164/	self
https://www.suse.com/security/cve/CVE-2019-14378/	self
https://www.suse.com/security/cve/CVE-2019-15890/	self
https://www.suse.com/security/cve/CVE-2019-6778/	self
https://www.suse.com/security/cve/CVE-2019-8934/	self
https://www.suse.com/security/cve/CVE-2019-9824/	self
https://www.suse.com/security/cve/CVE-2020-10702/	self
https://www.suse.com/security/cve/CVE-2020-10717/	self
https://www.suse.com/security/cve/CVE-2020-10761/	self
https://www.suse.com/security/cve/CVE-2020-11102/	self
https://www.suse.com/security/cve/CVE-2020-11869/	self
https://www.suse.com/security/cve/CVE-2020-13361/	self
https://www.suse.com/security/cve/CVE-2020-13362/	self
https://www.suse.com/security/cve/CVE-2020-13659/	self
https://www.suse.com/security/cve/CVE-2020-13800/	self
https://www.suse.com/security/cve/CVE-2020-14364/	self
https://www.suse.com/security/cve/CVE-2020-16092/	self
https://www.suse.com/security/cve/CVE-2020-1711/	self
https://www.suse.com/security/cve/CVE-2020-17380/	self
https://www.suse.com/security/cve/CVE-2020-1983/	self
https://www.suse.com/security/cve/CVE-2020-25085/	self
https://www.suse.com/security/cve/CVE-2020-25723/	self
https://www.suse.com/security/cve/CVE-2020-27821/	self
https://www.suse.com/security/cve/CVE-2020-29129/	self
https://www.suse.com/security/cve/CVE-2020-7039/	self
https://www.suse.com/security/cve/CVE-2020-8608/	self
https://www.suse.com/security/cve/CVE-2021-20181/	self
https://www.suse.com/security/cve/CVE-2021-20203/	self
https://www.suse.com/security/cve/CVE-2021-20221/	self
https://www.suse.com/security/cve/CVE-2021-20257/	self
https://www.suse.com/security/cve/CVE-2021-20263/	self
https://www.suse.com/security/cve/CVE-2021-3416/	self
https://www.suse.com/security/cve/CVE-2021-3527/	self
https://www.suse.com/security/cve/CVE-2021-3544/	self
https://www.suse.com/security/cve/CVE-2021-3545/	self
https://www.suse.com/security/cve/CVE-2021-3546/	self
https://www.suse.com/security/cve/CVE-2021-3582/	self
https://www.suse.com/security/cve/CVE-2021-3607/	self
https://www.suse.com/security/cve/CVE-2021-3608/	self
https://www.suse.com/security/cve/CVE-2021-3682/	self
https://www.suse.com/security/cve/CVE-2014-0222	external
https://bugzilla.suse.com/1072223	external
https://bugzilla.suse.com/877642	external
https://bugzilla.suse.com/950367	external
https://bugzilla.suse.com/964925	external
https://www.suse.com/security/cve/CVE-2014-8106	external
https://bugzilla.suse.com/1023004	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/907805	external
https://www.suse.com/security/cve/CVE-2015-5225	external
https://bugzilla.suse.com/942845	external
https://www.suse.com/security/cve/CVE-2015-6855	external
https://bugzilla.suse.com/945404	external
https://bugzilla.suse.com/965156	external
https://www.suse.com/security/cve/CVE-2015-8504	external
https://bugzilla.suse.com/958491	external
https://bugzilla.suse.com/958493	external
https://www.suse.com/security/cve/CVE-2015-8619	external
https://bugzilla.suse.com/960334	external
https://bugzilla.suse.com/965269	external
https://www.suse.com/security/cve/CVE-2016-10028	external
https://bugzilla.suse.com/1017084	external
https://bugzilla.suse.com/1017085	external
https://bugzilla.suse.com/1185981	external
https://www.suse.com/security/cve/CVE-2016-10155	external
https://bugzilla.suse.com/1021129	external
https://bugzilla.suse.com/1024183	external
https://www.suse.com/security/cve/CVE-2016-1714	external
https://bugzilla.suse.com/961691	external
https://bugzilla.suse.com/961692	external
https://www.suse.com/security/cve/CVE-2016-6490	external
https://bugzilla.suse.com/991466	external
https://bugzilla.suse.com/993854	external
https://www.suse.com/security/cve/CVE-2016-6836	external
https://bugzilla.suse.com/994760	external
https://bugzilla.suse.com/994761	external
https://www.suse.com/security/cve/CVE-2016-7156	external
https://bugzilla.suse.com/997859	external
https://www.suse.com/security/cve/CVE-2016-7157	external
https://bugzilla.suse.com/997860	external
https://www.suse.com/security/cve/CVE-2016-7161	external
https://bugzilla.suse.com/1001151	external
https://bugzilla.suse.com/1001152	external
https://www.suse.com/security/cve/CVE-2016-7170	external
https://bugzilla.suse.com/998516	external
https://www.suse.com/security/cve/CVE-2016-7421	external
https://bugzilla.suse.com/999661	external
https://www.suse.com/security/cve/CVE-2016-7422	external
https://bugzilla.suse.com/1000346	external
https://www.suse.com/security/cve/CVE-2016-7423	external
https://bugzilla.suse.com/1000397	external
https://www.suse.com/security/cve/CVE-2016-7466	external
https://bugzilla.suse.com/1000345	external
https://www.suse.com/security/cve/CVE-2016-7907	external
https://bugzilla.suse.com/1002549	external
https://www.suse.com/security/cve/CVE-2016-7908	external
https://bugzilla.suse.com/1002550	external
https://bugzilla.suse.com/1003030	external
https://www.suse.com/security/cve/CVE-2016-7909	external
https://bugzilla.suse.com/1002557	external
https://bugzilla.suse.com/1003032	external
https://www.suse.com/security/cve/CVE-2016-7994	external
https://bugzilla.suse.com/1003613	external
https://www.suse.com/security/cve/CVE-2016-7995	external
https://bugzilla.suse.com/1003612	external
https://bugzilla.suse.com/1003870	external
https://www.suse.com/security/cve/CVE-2016-8576	external
https://bugzilla.suse.com/1003878	external
https://bugzilla.suse.com/1004016	external
https://www.suse.com/security/cve/CVE-2016-8577	external
https://bugzilla.suse.com/1003893	external
https://bugzilla.suse.com/1004021	external
https://www.suse.com/security/cve/CVE-2016-8578	external
https://bugzilla.suse.com/1003894	external
https://bugzilla.suse.com/1004023	external
https://www.suse.com/security/cve/CVE-2016-8667	external
https://bugzilla.suse.com/1004702	external
https://bugzilla.suse.com/1005004	external
https://www.suse.com/security/cve/CVE-2016-8668	external
https://bugzilla.suse.com/1004706	external
https://www.suse.com/security/cve/CVE-2016-8669	external
https://bugzilla.suse.com/1004707	external
https://bugzilla.suse.com/1005005	external
https://www.suse.com/security/cve/CVE-2016-8909	external
https://bugzilla.suse.com/1006536	external
https://bugzilla.suse.com/1007160	external
https://www.suse.com/security/cve/CVE-2016-8910	external
https://bugzilla.suse.com/1006538	external
https://bugzilla.suse.com/1007157	external
https://bugzilla.suse.com/1024178	external
https://www.suse.com/security/cve/CVE-2016-9101	external
https://bugzilla.suse.com/1007391	external
https://bugzilla.suse.com/1013668	external
https://bugzilla.suse.com/1024181	external
https://www.suse.com/security/cve/CVE-2016-9102	external
https://bugzilla.suse.com/1007450	external
https://bugzilla.suse.com/1014256	external
https://www.suse.com/security/cve/CVE-2016-9103	external
https://bugzilla.suse.com/1007454	external
https://bugzilla.suse.com/1014259	external
https://www.suse.com/security/cve/CVE-2016-9104	external
https://bugzilla.suse.com/1007493	external
https://bugzilla.suse.com/1014297	external
https://bugzilla.suse.com/1034990	external
https://www.suse.com/security/cve/CVE-2016-9105	external
https://bugzilla.suse.com/1007494	external
https://bugzilla.suse.com/1014279	external
https://www.suse.com/security/cve/CVE-2016-9106	external
https://bugzilla.suse.com/1007495	external
https://bugzilla.suse.com/1014299	external
https://www.suse.com/security/cve/CVE-2016-9602	external
https://bugzilla.suse.com/1020427	external
https://www.suse.com/security/cve/CVE-2016-9907	external
https://bugzilla.suse.com/1014109	external
https://bugzilla.suse.com/1014490	external
https://www.suse.com/security/cve/CVE-2016-9921	external
https://bugzilla.suse.com/1014702	external
https://bugzilla.suse.com/1015169	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-10664	external
https://bugzilla.suse.com/1046636	external
https://bugzilla.suse.com/1046637	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-10806	external
https://bugzilla.suse.com/1047674	external
https://bugzilla.suse.com/1047675	external
https://www.suse.com/security/cve/CVE-2017-11334	external
https://bugzilla.suse.com/1048902	external
https://bugzilla.suse.com/1048920	external
https://www.suse.com/security/cve/CVE-2017-11434	external
https://bugzilla.suse.com/1049381	external
https://bugzilla.suse.com/1049578	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-13673	external
https://bugzilla.suse.com/1056386	external
https://bugzilla.suse.com/1056387	external
https://bugzilla.suse.com/1084604	external
https://www.suse.com/security/cve/CVE-2017-13711	external
https://bugzilla.suse.com/1056291	external
https://www.suse.com/security/cve/CVE-2017-14167	external
https://bugzilla.suse.com/1057585	external
https://www.suse.com/security/cve/CVE-2017-15038	external
https://bugzilla.suse.com/1062069	external
https://www.suse.com/security/cve/CVE-2017-15118	external
https://bugzilla.suse.com/1070147	external
https://www.suse.com/security/cve/CVE-2017-15268	external
https://bugzilla.suse.com/1062942	external
https://www.suse.com/security/cve/CVE-2017-15289	external
https://bugzilla.suse.com/1063122	external
https://bugzilla.suse.com/1063123	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-2615	external
https://bugzilla.suse.com/1023004	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-2620	external
https://bugzilla.suse.com/1024834	external
https://bugzilla.suse.com/1024972	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-2630	external
https://bugzilla.suse.com/1025396	external
https://www.suse.com/security/cve/CVE-2017-5525	external
https://bugzilla.suse.com/1020491	external
https://www.suse.com/security/cve/CVE-2017-5526	external
https://bugzilla.suse.com/1020589	external
https://bugzilla.suse.com/1059777	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-5552	external
https://bugzilla.suse.com/1021195	external
https://www.suse.com/security/cve/CVE-2017-5578	external
https://bugzilla.suse.com/1021481	external
https://www.suse.com/security/cve/CVE-2017-5579	external
https://bugzilla.suse.com/1021741	external
https://bugzilla.suse.com/1022627	external
https://www.suse.com/security/cve/CVE-2017-5667	external
https://bugzilla.suse.com/1022541	external
https://www.suse.com/security/cve/CVE-2017-5715	external
https://bugzilla.suse.com/1068032	external
https://bugzilla.suse.com/1074562	external
https://bugzilla.suse.com/1074578	external
https://bugzilla.suse.com/1074701	external
https://bugzilla.suse.com/1074741	external
https://bugzilla.suse.com/1074919	external
https://bugzilla.suse.com/1075006	external
https://bugzilla.suse.com/1075007	external
https://bugzilla.suse.com/1075262	external
https://bugzilla.suse.com/1075419	external
https://bugzilla.suse.com/1076115	external
https://bugzilla.suse.com/1076372	external
https://bugzilla.suse.com/1076606	external
https://bugzilla.suse.com/1078353	external
https://bugzilla.suse.com/1080039	external
https://bugzilla.suse.com/1087887	external
https://bugzilla.suse.com/1087939	external
https://bugzilla.suse.com/1088147	external
https://bugzilla.suse.com/1089055	external
https://bugzilla.suse.com/1091815	external
https://bugzilla.suse.com/1095735	external
https://bugzilla.suse.com/1102517	external
https://bugzilla.suse.com/1105108	external
https://bugzilla.suse.com/1126516	external
https://bugzilla.suse.com/1173489	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/1201457	external
https://bugzilla.suse.com/1201877	external
https://bugzilla.suse.com/1203236	external
https://www.suse.com/security/cve/CVE-2017-5856	external
https://bugzilla.suse.com/1023053	external
https://bugzilla.suse.com/1024186	external
https://www.suse.com/security/cve/CVE-2017-5857	external
https://bugzilla.suse.com/1023073	external
https://www.suse.com/security/cve/CVE-2017-5898	external
https://bugzilla.suse.com/1023907	external
https://bugzilla.suse.com/1024307	external
https://www.suse.com/security/cve/CVE-2017-5973	external
https://bugzilla.suse.com/1025109	external
https://bugzilla.suse.com/1025188	external
https://www.suse.com/security/cve/CVE-2017-6058	external
https://bugzilla.suse.com/1025837	external
https://www.suse.com/security/cve/CVE-2017-7471	external
https://bugzilla.suse.com/1034866	external
https://bugzilla.suse.com/1034990	external
https://www.suse.com/security/cve/CVE-2017-7493	external
https://bugzilla.suse.com/1039495	external
https://www.suse.com/security/cve/CVE-2017-8112	external
https://bugzilla.suse.com/1036211	external
https://bugzilla.suse.com/1036470	external
https://www.suse.com/security/cve/CVE-2017-8309	external
https://bugzilla.suse.com/1037242	external
https://bugzilla.suse.com/1037243	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2017-8379	external
https://bugzilla.suse.com/1037334	external
https://www.suse.com/security/cve/CVE-2017-8380	external
https://bugzilla.suse.com/1037336	external
https://www.suse.com/security/cve/CVE-2017-9503	external
https://bugzilla.suse.com/1043296	external
https://bugzilla.suse.com/1043297	external
https://bugzilla.suse.com/1043312	external
https://www.suse.com/security/cve/CVE-2017-9524	external
https://bugzilla.suse.com/1043808	external
https://www.suse.com/security/cve/CVE-2018-10839	external
https://bugzilla.suse.com/1110910	external
https://bugzilla.suse.com/1110924	external
https://www.suse.com/security/cve/CVE-2018-11806	external
https://bugzilla.suse.com/1096223	external
https://bugzilla.suse.com/1096224	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2018-12126	external
https://bugzilla.suse.com/1103186	external
https://bugzilla.suse.com/1111331	external
https://bugzilla.suse.com/1132686	external
https://bugzilla.suse.com/1135409	external
https://bugzilla.suse.com/1135524	external
https://bugzilla.suse.com/1137916	external
https://bugzilla.suse.com/1138534	external
https://bugzilla.suse.com/1141977	external
https://bugzilla.suse.com/1149725	external
https://bugzilla.suse.com/1149726	external
https://bugzilla.suse.com/1149729	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/1201877	external
https://www.suse.com/security/cve/CVE-2018-12130	external
https://bugzilla.suse.com/1103186	external
https://bugzilla.suse.com/1111331	external
https://bugzilla.suse.com/1132686	external
https://bugzilla.suse.com/1135409	external
https://bugzilla.suse.com/1137916	external
https://bugzilla.suse.com/1138534	external
https://bugzilla.suse.com/1141977	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/1201877	external
https://www.suse.com/security/cve/CVE-2018-12207	external
https://bugzilla.suse.com/1117665	external
https://bugzilla.suse.com/1139073	external
https://bugzilla.suse.com/1152505	external
https://bugzilla.suse.com/1155812	external
https://bugzilla.suse.com/1155817	external
https://bugzilla.suse.com/1155945	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/1201877	external
https://www.suse.com/security/cve/CVE-2018-15746	external
https://bugzilla.suse.com/1106222	external
https://www.suse.com/security/cve/CVE-2018-16872	external
https://bugzilla.suse.com/1119493	external
https://bugzilla.suse.com/1119494	external
https://www.suse.com/security/cve/CVE-2018-17963	external
https://bugzilla.suse.com/1111013	external
https://bugzilla.suse.com/1111014	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2018-20123	external
https://bugzilla.suse.com/1119437	external
https://bugzilla.suse.com/1119438	external
https://www.suse.com/security/cve/CVE-2018-20124	external
https://bugzilla.suse.com/1119840	external
https://bugzilla.suse.com/1119841	external
https://www.suse.com/security/cve/CVE-2018-20125	external
https://bugzilla.suse.com/1119989	external
https://www.suse.com/security/cve/CVE-2018-20126	external
https://bugzilla.suse.com/1119991	external
https://www.suse.com/security/cve/CVE-2018-20191	external
https://bugzilla.suse.com/1119979	external
https://bugzilla.suse.com/1119980	external
https://www.suse.com/security/cve/CVE-2018-20216	external
https://bugzilla.suse.com/1119984	external
https://bugzilla.suse.com/1119985	external
https://www.suse.com/security/cve/CVE-2018-20815	external
https://bugzilla.suse.com/1118900	external
https://bugzilla.suse.com/1130675	external
https://bugzilla.suse.com/1130680	external
https://bugzilla.suse.com/1138043	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2018-3639	external
https://bugzilla.suse.com/1074701	external
https://bugzilla.suse.com/1085235	external
https://bugzilla.suse.com/1085308	external
https://bugzilla.suse.com/1087078	external
https://bugzilla.suse.com/1087082	external
https://bugzilla.suse.com/1092631	external
https://bugzilla.suse.com/1092885	external
https://bugzilla.suse.com/1094912	external
https://bugzilla.suse.com/1098813	external
https://bugzilla.suse.com/1100394	external
https://bugzilla.suse.com/1102640	external
https://bugzilla.suse.com/1105412	external
https://bugzilla.suse.com/1111963	external
https://bugzilla.suse.com/1172781	external
https://bugzilla.suse.com/1172782	external
https://bugzilla.suse.com/1172783	external
https://bugzilla.suse.com/1173489	external
https://bugzilla.suse.com/1178658	external
https://bugzilla.suse.com/1201877	external
https://bugzilla.suse.com/1215674	external
https://www.suse.com/security/cve/CVE-2018-7858	external
https://bugzilla.suse.com/1084604	external
https://www.suse.com/security/cve/CVE-2019-03812	external
https://www.suse.com/security/cve/CVE-2019-11135	external
https://bugzilla.suse.com/1139073	external
https://bugzilla.suse.com/1152497	external
https://bugzilla.suse.com/1152505	external
https://bugzilla.suse.com/1152506	external
https://bugzilla.suse.com/1160120	external
https://bugzilla.suse.com/1201877	external
https://www.suse.com/security/cve/CVE-2019-12155	external
https://bugzilla.suse.com/1135902	external
https://bugzilla.suse.com/1135905	external
https://www.suse.com/security/cve/CVE-2019-13164	external
https://bugzilla.suse.com/1140402	external
https://www.suse.com/security/cve/CVE-2019-14378	external
https://bugzilla.suse.com/1143794	external
https://bugzilla.suse.com/1143797	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2019-15890	external
https://bugzilla.suse.com/1149811	external
https://bugzilla.suse.com/1149813	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2019-6778	external
https://bugzilla.suse.com/1123156	external
https://bugzilla.suse.com/1123157	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2019-8934	external
https://bugzilla.suse.com/1118900	external
https://bugzilla.suse.com/1126455	external
https://www.suse.com/security/cve/CVE-2019-9824	external
https://bugzilla.suse.com/1118900	external
https://bugzilla.suse.com/1129622	external
https://bugzilla.suse.com/1129623	external
https://bugzilla.suse.com/1178658	external
https://www.suse.com/security/cve/CVE-2020-10702	external
https://bugzilla.suse.com/1168681	external
https://www.suse.com/security/cve/CVE-2020-10717	external
https://bugzilla.suse.com/1171110	external
https://www.suse.com/security/cve/CVE-2020-10761	external
https://bugzilla.suse.com/1172710	external
https://www.suse.com/security/cve/CVE-2020-11102	external
https://bugzilla.suse.com/1168713	external
https://www.suse.com/security/cve/CVE-2020-11869	external
https://bugzilla.suse.com/1170537	external
https://bugzilla.suse.com/1188609	external
https://www.suse.com/security/cve/CVE-2020-13361	external
https://bugzilla.suse.com/1172384	external
https://www.suse.com/security/cve/CVE-2020-13362	external
https://bugzilla.suse.com/1172383	external
https://www.suse.com/security/cve/CVE-2020-13659	external
https://bugzilla.suse.com/1172386	external
https://www.suse.com/security/cve/CVE-2020-13800	external
https://bugzilla.suse.com/1172495	external
https://www.suse.com/security/cve/CVE-2020-14364	external
https://bugzilla.suse.com/1175441	external
https://bugzilla.suse.com/1175534	external
https://bugzilla.suse.com/1176494	external
https://bugzilla.suse.com/1177130	external
https://www.suse.com/security/cve/CVE-2020-16092	external
https://bugzilla.suse.com/1174641	external
https://www.suse.com/security/cve/CVE-2020-1711	external
https://bugzilla.suse.com/1166240	external
https://www.suse.com/security/cve/CVE-2020-17380	external
https://bugzilla.suse.com/1175144	external
https://bugzilla.suse.com/1182282	external
https://www.suse.com/security/cve/CVE-2020-1983	external
https://bugzilla.suse.com/1170940	external
https://www.suse.com/security/cve/CVE-2020-25085	external
https://bugzilla.suse.com/1176681	external
https://bugzilla.suse.com/1182282	external
https://www.suse.com/security/cve/CVE-2020-25723	external
https://bugzilla.suse.com/1178934	external
https://bugzilla.suse.com/1178935	external
https://www.suse.com/security/cve/CVE-2020-27821	external
https://bugzilla.suse.com/1179686	external
https://www.suse.com/security/cve/CVE-2020-29129	external
https://bugzilla.suse.com/1179466	external
https://bugzilla.suse.com/1179467	external
https://bugzilla.suse.com/1179477	external
https://bugzilla.suse.com/1179484	external
https://www.suse.com/security/cve/CVE-2020-7039	external
https://bugzilla.suse.com/1161066	external
https://www.suse.com/security/cve/CVE-2020-8608	external
https://bugzilla.suse.com/1163018	external
https://bugzilla.suse.com/1163019	external
https://www.suse.com/security/cve/CVE-2021-20181	external
https://bugzilla.suse.com/1182137	external
https://www.suse.com/security/cve/CVE-2021-20203	external
https://bugzilla.suse.com/1181639	external
https://www.suse.com/security/cve/CVE-2021-20221	external
https://bugzilla.suse.com/1181933	external
https://www.suse.com/security/cve/CVE-2021-20257	external
https://bugzilla.suse.com/1182577	external
https://bugzilla.suse.com/1182846	external
https://www.suse.com/security/cve/CVE-2021-20263	external
https://bugzilla.suse.com/1183373	external
https://www.suse.com/security/cve/CVE-2021-3416	external
https://bugzilla.suse.com/1182968	external
https://bugzilla.suse.com/1186473	external
https://www.suse.com/security/cve/CVE-2021-3527	external
https://bugzilla.suse.com/1186012	external
https://www.suse.com/security/cve/CVE-2021-3544	external
https://bugzilla.suse.com/1186010	external
https://www.suse.com/security/cve/CVE-2021-3545	external
https://bugzilla.suse.com/1185990	external
https://www.suse.com/security/cve/CVE-2021-3546	external
https://bugzilla.suse.com/1185981	external
https://www.suse.com/security/cve/CVE-2021-3582	external
https://bugzilla.suse.com/1187499	external
https://www.suse.com/security/cve/CVE-2021-3607	external
https://bugzilla.suse.com/1187539	external
https://www.suse.com/security/cve/CVE-2021-3608	external
https://bugzilla.suse.com/1187538	external
https://www.suse.com/security/cve/CVE-2021-3682	external
https://bugzilla.suse.com/1189145	external

JSON

To clipboard

Loading 5.4 MB of JSON…

CVE-2017-5667 (GCVE-0-2017-5667)

Vulnerability from cvelistv5 – Published: 2017-03-16 15:00 – Updated: 2024-08-05 15:11

Summary

The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

8 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://www.openwall.com/lists/oss-security/2017/01/30/2	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/95885	vdb-entryx_refsource_BID
http://www.openwall.com/lists/oss-security/2017/02/12/1	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1417559	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM

Date Public

2017-01-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.396Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170130 CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/30/2"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "95885",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95885"
          },
          {
            "name": "[oss-security] 20170212 Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/12/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1417559"
          },
          {
            "name": "[oss-security] 20170131 Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/31/10"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170130 CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/30/2"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "95885",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95885"
        },
        {
          "name": "[oss-security] 20170212 Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/12/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1417559"
        },
        {
          "name": "[oss-security] 20170131 Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/31/10"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5667",
    "datePublished": "2017-03-16T15:00:00.000Z",
    "dateReserved": "2017-01-31T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:11:48.396Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5715 (GCVE-0-2017-5715)

Vulnerability from cvelistv5 – Published: 2018-01-04 13:00 – Updated: 2025-05-06 14:59

Summary

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-23 13:31 UTC

CWE

Information Disclosure
CWE-203 - Observable Discrepancy

Assigner

intel mitre root

References

94 references

URL	Tags
http://nvidia.custhelp.com/app/answers/detail/a_id/4609	x_refsource_CONFIRM
https://usn.ubuntu.com/3560-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://www.debian.org/security/2018/dsa-4187	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3542-2/	vendor-advisoryx_refsource_UBUNTU
https://security.gentoo.org/glsa/201810-06	vendor-advisoryx_refsource_GENTOO
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://usn.ubuntu.com/3540-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/vulnerabilitie…	x_refsource_CONFIRM
https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3597-1/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://nvidia.custhelp.com/app/answers/detail/a_id/4611	x_refsource_CONFIRM
https://security.googleblog.com/2018/01/todays-cp…	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4213	vendor-advisoryx_refsource_DEBIAN
https://cert.vde.com/en-us/advisories/vde-2018-002	x_refsource_CONFIRM
https://www.debian.org/security/2018/dsa-4120	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/3580-1/	vendor-advisoryx_refsource_UBUNTU
https://support.f5.com/csp/article/K91229003	x_refsource_CONFIRM
https://usn.ubuntu.com/3531-3/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3620-2/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/3582-1/	vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2018/dsa-4188	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:0292	vendor-advisoryx_refsource_REDHAT
http://xenbits.xen.org/xsa/advisory-254.html	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2018010…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.synology.com/support/security/Synolog…	x_refsource_CONFIRM
http://packetstormsecurity.com/files/145645/Spect…	x_refsource_MISC
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/102376	vdb-entryx_refsource_BID
https://developer.arm.com/support/arm-security-up…	x_refsource_CONFIRM
https://usn.ubuntu.com/3594-1/	vendor-advisoryx_refsource_UBUNTU
http://www.kb.cert.org/vuls/id/584653	third-party-advisoryx_refsource_CERT-VN
https://www.kb.cert.org/vuls/id/180049	third-party-advisoryx_refsource_CERT-VN
https://cert.vde.com/en-us/advisories/vde-2018-003	x_refsource_CONFIRM
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/3690-1/	vendor-advisoryx_refsource_UBUNTU
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
https://www.mitel.com/en-ca/support/security-advi…	x_refsource_CONFIRM
https://support.hpe.com/hpsc/doc/public/display?d…	x_refsource_CONFIRM
https://www.vmware.com/us/security/advisories/VMS…	x_refsource_CONFIRM
https://usn.ubuntu.com/3549-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.suse.com/c/suse-addresses-meltdown-sp…	x_refsource_CONFIRM
https://support.citrix.com/article/CTX231399	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://spectreattack.com/	x_refsource_MISC
https://usn.ubuntu.com/3531-1/	vendor-advisoryx_refsource_UBUNTU
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://aws.amazon.com/de/security/security-bulle…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/3581-1/	vendor-advisoryx_refsource_UBUNTU
https://blog.mozilla.org/security/2018/01/03/miti…	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040071	vdb-entryx_refsource_SECTRACK
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://security-center.intel.com/advisory.aspx?i…	x_refsource_CONFIRM
https://usn.ubuntu.com/3597-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3581-2/	vendor-advisoryx_refsource_UBUNTU
http://nvidia.custhelp.com/app/answers/detail/a_id/4614	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
https://usn.ubuntu.com/usn/usn-3516-1/	vendor-advisoryx_refsource_UBUNTU
https://www.vmware.com/us/security/advisories/VMS…	x_refsource_CONFIRM
https://www.exploit-db.com/exploits/43427/	exploitx_refsource_EXPLOIT-DB
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/3541-2/	vendor-advisoryx_refsource_UBUNTU
https://googleprojectzero.blogspot.com/2018/01/re…	x_refsource_MISC
https://support.lenovo.com/us/en/solutions/LEN-18282	x_refsource_CONFIRM
https://usn.ubuntu.com/3777-3/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.vmware.com/security/advisories/VMSA-2…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://nvidia.custhelp.com/app/answers/detail/a_id/4613	x_refsource_CONFIRM
https://usn.ubuntu.com/3561-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3582-2/	vendor-advisoryx_refsource_UBUNTU
https://seclists.org/bugtraq/2019/Jun/36	mailing-listx_refsource_BUGTRAQ
http://www.arubanetworks.com/assets/alert/ARUBA-P…	x_refsource_CONFIRM
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://security.FreeBSD.org/advisories/FreeBSD-S…	vendor-advisoryx_refsource_FREEBSD
https://seclists.org/bugtraq/2019/Nov/16	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155281/FreeB…	x_refsource_MISC
https://security.paloaltonetworks.com/CVE-2017-5715	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
Intel Corporation	Microprocessors with Speculative Execution	Affected: All

Date Public

2018-01-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
          },
          {
            "name": "USN-3560-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3560-1/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3542-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3542-2/"
          },
          {
            "name": "GLSA-201810-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "name": "USN-3540-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3540-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "USN-3597-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3597-1/"
          },
          {
            "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2018:0012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
          },
          {
            "name": "DSA-4120",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4120"
          },
          {
            "name": "openSUSE-SU-2018:0013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
          },
          {
            "name": "USN-3580-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3580-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K91229003"
          },
          {
            "name": "USN-3531-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3531-3/"
          },
          {
            "name": "USN-3620-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-2/"
          },
          {
            "name": "openSUSE-SU-2018:0022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
          },
          {
            "name": "USN-3582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "RHSA-2018:0292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-254.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
          },
          {
            "name": "SUSE-SU-2018:0019",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_01"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
          },
          {
            "name": "102376",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102376"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
          },
          {
            "name": "USN-3594-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3594-1/"
          },
          {
            "name": "VU#584653",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/584653"
          },
          {
            "name": "VU#180049",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/180049"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
          },
          {
            "name": "SUSE-SU-2018:0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
          },
          {
            "name": "USN-3690-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3690-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
          },
          {
            "name": "USN-3549-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3549-1/"
          },
          {
            "name": "SUSE-SU-2018:0007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX231399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://spectreattack.com/"
          },
          {
            "name": "USN-3531-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3531-1/"
          },
          {
            "name": "FreeBSD-SA-18:03",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
          },
          {
            "name": "SUSE-SU-2018:0006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
          },
          {
            "name": "USN-3581-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
          },
          {
            "name": "1040071",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040071"
          },
          {
            "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
          },
          {
            "name": "USN-3597-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3597-2/"
          },
          {
            "name": "USN-3581-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
          },
          {
            "name": "SUSE-SU-2018:0010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
          },
          {
            "name": "USN-3516-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
          },
          {
            "name": "43427",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/43427/"
          },
          {
            "name": "SUSE-SU-2018:0020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
          },
          {
            "name": "USN-3541-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3541-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
          },
          {
            "name": "USN-3777-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-3/"
          },
          {
            "name": "openSUSE-SU-2018:0023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
          },
          {
            "name": "SUSE-SU-2018:0008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
          },
          {
            "name": "USN-3561-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3561-1/"
          },
          {
            "name": "USN-3582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-2/"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
          },
          {
            "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
          },
          {
            "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2017-5715",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:09.657900Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-203",
                "description": "CWE-203 Observable Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-06T14:59:36.405Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microprocessors with Speculative Execution",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ],
      "datePublic": "2018-01-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-16T08:06:27.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
        },
        {
          "name": "USN-3560-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3560-1/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3542-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3542-2/"
        },
        {
          "name": "GLSA-201810-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "name": "USN-3540-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3540-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "USN-3597-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3597-1/"
        },
        {
          "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2018:0012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
        },
        {
          "name": "DSA-4120",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4120"
        },
        {
          "name": "openSUSE-SU-2018:0013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
        },
        {
          "name": "USN-3580-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3580-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K91229003"
        },
        {
          "name": "USN-3531-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3531-3/"
        },
        {
          "name": "USN-3620-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-2/"
        },
        {
          "name": "openSUSE-SU-2018:0022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
        },
        {
          "name": "USN-3582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "RHSA-2018:0292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-254.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
        },
        {
          "name": "SUSE-SU-2018:0019",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_01"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
        },
        {
          "name": "102376",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102376"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
        },
        {
          "name": "USN-3594-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3594-1/"
        },
        {
          "name": "VU#584653",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/584653"
        },
        {
          "name": "VU#180049",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/180049"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
        },
        {
          "name": "SUSE-SU-2018:0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
        },
        {
          "name": "USN-3690-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3690-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
        },
        {
          "name": "USN-3549-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3549-1/"
        },
        {
          "name": "SUSE-SU-2018:0007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX231399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://spectreattack.com/"
        },
        {
          "name": "USN-3531-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3531-1/"
        },
        {
          "name": "FreeBSD-SA-18:03",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
        },
        {
          "name": "SUSE-SU-2018:0006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
        },
        {
          "name": "USN-3581-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
        },
        {
          "name": "1040071",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040071"
        },
        {
          "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
        },
        {
          "name": "USN-3597-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3597-2/"
        },
        {
          "name": "USN-3581-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
        },
        {
          "name": "SUSE-SU-2018:0010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
        },
        {
          "name": "USN-3516-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
        },
        {
          "name": "43427",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/43427/"
        },
        {
          "name": "SUSE-SU-2018:0020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
        },
        {
          "name": "USN-3541-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3541-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
        },
        {
          "name": "USN-3777-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-3/"
        },
        {
          "name": "openSUSE-SU-2018:0023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
        },
        {
          "name": "SUSE-SU-2018:0008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
        },
        {
          "name": "USN-3561-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3561-1/"
        },
        {
          "name": "USN-3582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-2/"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
        },
        {
          "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
        },
        {
          "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2018-01-03T00:00:00",
          "ID": "CVE-2017-5715",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Microprocessors with Speculative Execution",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
            },
            {
              "name": "USN-3560-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3560-1/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3542-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3542-2/"
            },
            {
              "name": "GLSA-201810-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-06"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
            },
            {
              "name": "USN-3540-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3540-2/"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "USN-3597-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3597-1/"
            },
            {
              "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2018:0012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
            },
            {
              "name": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
              "refsource": "MISC",
              "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2018-002",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
            },
            {
              "name": "DSA-4120",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4120"
            },
            {
              "name": "openSUSE-SU-2018:0013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
            },
            {
              "name": "USN-3580-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3580-1/"
            },
            {
              "name": "https://support.f5.com/csp/article/K91229003",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K91229003"
            },
            {
              "name": "USN-3531-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3531-3/"
            },
            {
              "name": "USN-3620-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-2/"
            },
            {
              "name": "openSUSE-SU-2018:0022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
            },
            {
              "name": "USN-3582-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-1/"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "RHSA-2018:0292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0292"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-254.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-254.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180104-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
            },
            {
              "name": "SUSE-SU-2018:0019",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_01",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_01"
            },
            {
              "name": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
            },
            {
              "name": "102376",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102376"
            },
            {
              "name": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
              "refsource": "CONFIRM",
              "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
            },
            {
              "name": "USN-3594-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3594-1/"
            },
            {
              "name": "VU#584653",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/584653"
            },
            {
              "name": "VU#180049",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/180049"
            },
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2018-003",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
            },
            {
              "name": "SUSE-SU-2018:0009",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
            },
            {
              "name": "USN-3690-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3690-1/"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
            },
            {
              "name": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
              "refsource": "CONFIRM",
              "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
            },
            {
              "name": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
            },
            {
              "name": "USN-3549-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3549-1/"
            },
            {
              "name": "SUSE-SU-2018:0007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
            },
            {
              "name": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
            },
            {
              "name": "https://support.citrix.com/article/CTX231399",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX231399"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://spectreattack.com/",
              "refsource": "MISC",
              "url": "https://spectreattack.com/"
            },
            {
              "name": "USN-3531-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3531-1/"
            },
            {
              "name": "FreeBSD-SA-18:03",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
            },
            {
              "name": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
              "refsource": "CONFIRM",
              "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
            },
            {
              "name": "SUSE-SU-2018:0006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
            },
            {
              "name": "USN-3581-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-1/"
            },
            {
              "name": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
              "refsource": "CONFIRM",
              "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
            },
            {
              "name": "1040071",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040071"
            },
            {
              "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
            },
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
            },
            {
              "name": "USN-3597-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3597-2/"
            },
            {
              "name": "USN-3581-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-2/"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
            },
            {
              "name": "SUSE-SU-2018:0010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
            },
            {
              "name": "USN-3516-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
            },
            {
              "name": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
            },
            {
              "name": "43427",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/43427/"
            },
            {
              "name": "SUSE-SU-2018:0020",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
            },
            {
              "name": "USN-3541-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3541-2/"
            },
            {
              "name": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
              "refsource": "MISC",
              "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
            },
            {
              "name": "https://support.lenovo.com/us/en/solutions/LEN-18282",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
            },
            {
              "name": "USN-3777-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-3/"
            },
            {
              "name": "openSUSE-SU-2018:0023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
            },
            {
              "name": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
            },
            {
              "name": "SUSE-SU-2018:0008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
            },
            {
              "name": "USN-3561-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3561-1/"
            },
            {
              "name": "USN-3582-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-2/"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "https://security.paloaltonetworks.com/CVE-2017-5715",
              "refsource": "CONFIRM",
              "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
            },
            {
              "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
            },
            {
              "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2017-5715",
    "datePublished": "2018-01-04T13:00:00.000Z",
    "dateReserved": "2017-02-01T00:00:00.000Z",
    "dateUpdated": "2025-05-06T14:59:36.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5856 (GCVE-0-2017-5856)

Vulnerability from cvelistv5 – Published: 2017-03-16 15:00 – Updated: 2024-08-05 15:11

Summary

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

7 references

URL	Tags
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/95999	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1418342	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM

Date Public

2017-02-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.732Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20170201 CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/19"
          },
          {
            "name": "95999",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95999"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418342"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "[oss-security] 20170202 Re: CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20170201 CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/19"
        },
        {
          "name": "95999",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95999"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418342"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "[oss-security] 20170202 Re: CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5856",
    "datePublished": "2017-03-16T15:00:00.000Z",
    "dateReserved": "2017-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:11:48.732Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5857 (GCVE-0-2017-5857)

Vulnerability from cvelistv5 – Published: 2017-03-16 15:00 – Updated: 2024-08-05 15:11

Summary

Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

6 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=1418382	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/95993	vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST

Date Public

2017-02-01 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418382"
          },
          {
            "name": "[oss-security] 20170202 Re: CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/16"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798"
          },
          {
            "name": "95993",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95993"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "[oss-security] 20170201 CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/21"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the backing storage beforehand."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418382"
        },
        {
          "name": "[oss-security] 20170202 Re: CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/16"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=5e8e3c4c75c199aa1017db816fca02be2a9f8798"
        },
        {
          "name": "95993",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95993"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "[oss-security] 20170201 CVE request Qemu: display: virtio-gpu-3d: host memory leakage in virgl_cmd_resource_unref",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/21"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5857",
    "datePublished": "2017-03-16T15:00:00.000Z",
    "dateReserved": "2017-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:11:48.907Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5898 (GCVE-0-2017-5898)

Vulnerability from cvelistv5 – Published: 2017-03-15 19:00 – Updated: 2024-08-05 15:11

Summary

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.openwall.com/lists/oss-security/2017/02/07/3	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201702-28	vendor-advisoryx_refsource_GENTOO
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.securityfocus.com/bid/96112	vdb-entryx_refsource_BID
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1419699	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:1856	vendor-advisoryx_refsource_REDHAT

Date Public

2017-02-07 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.967Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2017:0582",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
          },
          {
            "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "SUSE-SU-2017:0570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
          },
          {
            "name": "96112",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96112"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
          },
          {
            "name": "RHSA-2017:1856",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1856"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2017:0582",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
        },
        {
          "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "SUSE-SU-2017:0570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
        },
        {
          "name": "96112",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96112"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
        },
        {
          "name": "RHSA-2017:1856",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1856"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5898",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2017:0582",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
            },
            {
              "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201702-28",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-28"
            },
            {
              "name": "SUSE-SU-2017:0570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
            },
            {
              "name": "96112",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96112"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=c7dfbf322595ded4e70b626bf83158a9f3807c6a",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
            },
            {
              "name": "RHSA-2017:1856",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1856"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5898",
    "datePublished": "2017-03-15T19:00:00.000Z",
    "dateReserved": "2017-02-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:11:48.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5973 (GCVE-0-2017-5973)

Vulnerability from cvelistv5 – Published: 2017-03-27 15:00 – Updated: 2024-08-05 15:18

Summary

The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1421626	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201704-01	vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2017/0…	mailing-listx_refsource_MLIST
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/96220	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisoryx_refsource_REDHAT

Date Public

2017-02-06 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
          },
          {
            "name": "96220",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96220"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-06T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
        },
        {
          "name": "96220",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96220"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5973",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
            },
            {
              "name": "96220",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96220"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5973",
    "datePublished": "2017-03-27T15:00:00.000Z",
    "dateReserved": "2017-02-13T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:18:49.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-6058 (GCVE-0-2017-6058)

Vulnerability from cvelistv5 – Published: 2017-03-20 16:00 – Updated: 2024-08-05 15:18

Summary

Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://lists.nongnu.org/archive/html/qemu-devel/…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1423358	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2017/02/17/2	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201704-01	vendor-advisoryx_refsource_GENTOO
http://www.securitytracker.com/id/1037856	vdb-entryx_refsource_SECTRACK
http://git.qemu-project.org/?p=qemu.git%3Ba=commi…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/96277	vdb-entryx_refsource_BID

Date Public

2017-02-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.650Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1423358"
          },
          {
            "name": "[oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/17/2"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "1037856",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037856"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6"
          },
          {
            "name": "96277",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96277"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1423358"
        },
        {
          "name": "[oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/17/2"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "1037856",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037856"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6"
        },
        {
          "name": "96277",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96277"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows remote attackers to cause a denial of service (out-of-bounds access and QEMU process crash) via vectors related to VLAN stripping."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[qemu-devel] 20170216 [PATCH 2/5] NetRxPkt: Fix memory corruption on VLAN header stripping",
              "refsource": "MLIST",
              "url": "https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg03527.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1423358",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1423358"
            },
            {
              "name": "[oss-security] 20170217 CVE-2017-6058 Qemu: net: vmxnet3: OOB NetRxPkt::ehdr_buf access when doing vlan stripping",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/17/2"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "1037856",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037856"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=df8bf7a7fe75eb5d5caffa55f5cd4292b757aea6"
            },
            {
              "name": "96277",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96277"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6058",
    "datePublished": "2017-03-20T16:00:00.000Z",
    "dateReserved": "2017-02-17T00:00:00.000Z",
    "dateUpdated": "2024-08-05T15:18:49.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7471 (GCVE-0-2017-7471)

Vulnerability from cvelistv5 – Published: 2018-07-09 14:00 – Updated: 2024-08-05 16:04

Summary

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

5 references

URL	Tags
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201706-03	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/97970	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2017/04/19/2	mailing-listx_refsource_MLIST

Date Public

2017-04-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.568Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "97970",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97970"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471"
          },
          {
            "name": "[oss-security] 20170419 CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/19/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-10T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "97970",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97970"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471"
        },
        {
          "name": "[oss-security] 20170419 CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/19/2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7471",
    "datePublished": "2018-07-09T14:00:00.000Z",
    "dateReserved": "2017-04-05T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:11.568Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7493 (GCVE-0-2017-7493)

Vulnerability from cvelistv5 – Published: 2017-05-17 15:00 – Updated: 2024-08-05 16:04

Summary

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.

Severity

No CVSS data available.

CWE

Improper access control issue

Assigner

redhat redhat root

References

6 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://security.gentoo.org/glsa/201706-03	vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/98574	vdb-entryx_refsource_BID
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1451709	x_refsource_CONFIRM
http://seclists.org/oss-sec/2017/q2/278	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
QEMU	qemu	Affected: 2.7.4

Date Public

2017-05-16 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.894Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "98574",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98574"
          },
          {
            "name": "[qemu-devel] 20170516 [PULL] 9pfs: local: forbid client access to metadata (CVE-2017-7493)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1451709"
          },
          {
            "name": "[oss-security] 20170517 CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2017/q2/278"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "qemu",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.4"
            }
          ]
        }
      ],
      "datePublic": "2017-05-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper access control issue",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "98574",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98574"
        },
        {
          "name": "[qemu-devel] 20170516 [PULL] 9pfs: local: forbid client access to metadata (CVE-2017-7493)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1451709"
        },
        {
          "name": "[oss-security] 20170517 CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2017/q2/278"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7493",
    "datePublished": "2017-05-17T15:00:00.000Z",
    "dateReserved": "2017-04-05T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:04:11.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8112 (GCVE-0-2017-8112)

Vulnerability from cvelistv5 – Published: 2017-05-02 14:00 – Updated: 2024-08-05 16:27

Summary

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://lists.debian.org/debian-lts-announce/2018…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1445621	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201706-03	vendor-advisoryx_refsource_GENTOO
http://www.openwall.com/lists/oss-security/2017/04/26/5	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/98015	vdb-entryx_refsource_BID
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST

Date Public

2017-04-25 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:27:22.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
          },
          {
            "name": "98015",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98015"
          },
          {
            "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
        },
        {
          "name": "98015",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98015"
        },
        {
          "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8112",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
            },
            {
              "name": "98015",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98015"
            },
            {
              "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8112",
    "datePublished": "2017-05-02T14:00:00.000Z",
    "dateReserved": "2017-04-25T00:00:00.000Z",
    "dateUpdated": "2024-08-05T16:27:22.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2024:11287-1

CVE-2017-5667 (GCVE-0-2017-5667)

CVE-2017-5715 (GCVE-0-2017-5715)

CVE-2017-5856 (GCVE-0-2017-5856)

CVE-2017-5857 (GCVE-0-2017-5857)

CVE-2017-5898 (GCVE-0-2017-5898)

CVE-2017-5973 (GCVE-0-2017-5973)

CVE-2017-6058 (GCVE-0-2017-6058)

CVE-2017-7471 (GCVE-0-2017-7471)

CVE-2017-7493 (GCVE-0-2017-7493)

CVE-2017-8112 (GCVE-0-2017-8112)

Tags

Sightings

Nomenclature

Related by attack behaviour