SUSE-SU-2015:1782-1 - Vulnerability-Lookup

SUSE-SU-2015:1782-1

Vulnerability from csaf_suse - Published: 2015-09-28 09:38 - Updated: 2015-09-28 09:38

Summary

Security update for qemu

Severity

Important

Notes

Title of the patch: Security update for qemu

Description of the patch: qemu was updated to fix several security issues and bugs. The following vulnerabilities were fixed: - CVE-2015-5154: Heap-based buffer overflow in the IDE subsystem in QEMU, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands. (bsc#938344). - CVE-2015-5278: QEMU was vulnerable to an infinite loop issue that could occur when receiving packets over the network. (bsc#945989) - CVE-2015-5279: QEMU was vulnerable to a heap buffer overflow issue that could occur when receiving packets over the network. (bsc#945987) - CVE-2015-6855: QEMU was vulnerable to a divide by zero issue that could occur while executing an IDE command WIN_READ_NATIVE_MAX to determine the maximum size of a drive. (bsc#945404) - CVE-2014-7815: The set_pixel_format function in ui/vnc.c in QEMU allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value. (bsc#902737): Also these non-security issues were fixed: - bsc#937572: Fixed dictzip on big endian systems - bsc#934517: Fix 'info tlb' causes guest to freeze - bsc#934506: Fix vte monitor consol looks empy - bsc#937125: Fix parsing of scsi-disk wwn uint64 property - bsc#945778: Drop .probe hooks for DictZip and tar block drivers - bsc#937572: Fold common-obj-y -> block-obj-y change into original patches - bsc#928308,bsc#944017: Fix virtio-ccw index errors when initrd gets too large - bsc#936537: Fix possible qemu-img error when converting to compressed qcow2 image - bsc#939216: Fix reboot fail after install using uefi - bsc#943446: qemu-img convert doesn't create MB aligned VHDs anymore

Patchnames: SUSE-SLE-DESKTOP-12-2015-715,SUSE-SLE-SERVER-12-2015-715

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

CVE-2014-7815

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-5154

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-5278

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-5279

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

CVE-2015-6855

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor Fix To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

URL

Category

	https://www.suse.com/support/security/rating/	external
	https://ftp.suse.com/pub/projects/security/csaf/s…	self
	https://www.suse.com/support/update/announcement/…	self
	https://lists.suse.com/pipermail/sle-security-upd…	self
	https://bugzilla.suse.com/902737	self
	https://bugzilla.suse.com/928308	self
	https://bugzilla.suse.com/934506	self
	https://bugzilla.suse.com/934517	self
	https://bugzilla.suse.com/936537	self
	https://bugzilla.suse.com/937125	self
	https://bugzilla.suse.com/937572	self
	https://bugzilla.suse.com/938344	self
	https://bugzilla.suse.com/939216	self
	https://bugzilla.suse.com/943446	self
	https://bugzilla.suse.com/944017	self
	https://bugzilla.suse.com/945404	self
	https://bugzilla.suse.com/945778	self
	https://bugzilla.suse.com/945987	self
	https://bugzilla.suse.com/945989	self
	https://www.suse.com/security/cve/CVE-2014-7815/	self
	https://www.suse.com/security/cve/CVE-2015-5154/	self
	https://www.suse.com/security/cve/CVE-2015-5278/	self
	https://www.suse.com/security/cve/CVE-2015-5279/	self
	https://www.suse.com/security/cve/CVE-2015-6855/	self
	https://www.suse.com/security/cve/CVE-2014-7815	external
	https://bugzilla.suse.com/902737	external
	https://bugzilla.suse.com/962627	external
	https://www.suse.com/security/cve/CVE-2015-5154	external
	https://bugzilla.suse.com/938344	external
	https://bugzilla.suse.com/950367	external
	https://www.suse.com/security/cve/CVE-2015-5278	external
	https://bugzilla.suse.com/945989	external
	https://bugzilla.suse.com/964947	external
	https://www.suse.com/security/cve/CVE-2015-5279	external
	https://bugzilla.suse.com/945987	external
	https://www.suse.com/security/cve/CVE-2015-6855	external
	https://bugzilla.suse.com/945404	external
	https://bugzilla.suse.com/965156	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for qemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "qemu was updated to fix several security issues and bugs.\n\nThe following vulnerabilities were fixed:\n- CVE-2015-5154: Heap-based buffer overflow in the IDE subsystem in QEMU,\n  when the container has a CDROM drive enabled, allows local guest users\n  to execute arbitrary code on the host via unspecified ATAPI commands.\n  (bsc#938344).\n- CVE-2015-5278: QEMU was vulnerable to an infinite loop issue that\n  could occur when receiving packets over the network. (bsc#945989)\n- CVE-2015-5279: QEMU was vulnerable to a heap buffer overflow issue\n  that could occur when receiving packets over the network. (bsc#945987)\n- CVE-2015-6855: QEMU was vulnerable to a divide by zero issue that could\n  occur while executing an IDE command WIN_READ_NATIVE_MAX to determine\n  the maximum size of a drive. (bsc#945404)\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c in QEMU\n  allowed remote attackers to cause a denial of service (crash) via a small\n  bytes_per_pixel value.  (bsc#902737):\n\nAlso these non-security issues were fixed:\n- bsc#937572: Fixed dictzip on big endian systems \n- bsc#934517: Fix \u0027info tlb\u0027 causes guest to freeze\n- bsc#934506: Fix vte monitor consol looks empy\n- bsc#937125: Fix parsing of scsi-disk wwn uint64 property \n- bsc#945778: Drop .probe hooks for DictZip and tar block drivers\n- bsc#937572: Fold common-obj-y -\u003e block-obj-y change into original patches\n- bsc#928308,bsc#944017: Fix virtio-ccw index errors when initrd gets too large \n- bsc#936537: Fix possible qemu-img error when converting to compressed qcow2 image\n- bsc#939216: Fix reboot fail after install using uefi\n- bsc#943446: qemu-img convert doesn\u0027t create MB aligned VHDs anymore\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-2015-715,SUSE-SLE-SERVER-12-2015-715",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1782-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:1782-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151782-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:1782-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-October/001636.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 902737",
        "url": "https://bugzilla.suse.com/902737"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 928308",
        "url": "https://bugzilla.suse.com/928308"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 934506",
        "url": "https://bugzilla.suse.com/934506"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 934517",
        "url": "https://bugzilla.suse.com/934517"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 936537",
        "url": "https://bugzilla.suse.com/936537"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 937125",
        "url": "https://bugzilla.suse.com/937125"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 937572",
        "url": "https://bugzilla.suse.com/937572"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 938344",
        "url": "https://bugzilla.suse.com/938344"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 939216",
        "url": "https://bugzilla.suse.com/939216"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 943446",
        "url": "https://bugzilla.suse.com/943446"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 944017",
        "url": "https://bugzilla.suse.com/944017"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 945404",
        "url": "https://bugzilla.suse.com/945404"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 945778",
        "url": "https://bugzilla.suse.com/945778"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 945987",
        "url": "https://bugzilla.suse.com/945987"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 945989",
        "url": "https://bugzilla.suse.com/945989"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-7815 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-7815/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5154 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5154/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5278 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5278/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5279 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5279/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-6855 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-6855/"
      }
    ],
    "title": "Security update for qemu",
    "tracking": {
      "current_release_date": "2015-09-28T09:38:55Z",
      "generator": {
        "date": "2015-09-28T09:38:55Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:1782-1",
      "initial_release_date": "2015-09-28T09:38:55Z",
      "revision_history": [
        {
          "date": "2015-09-28T09:38:55Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-ipxe-1.0.0-48.9.1.noarch",
                "product": {
                  "name": "qemu-ipxe-1.0.0-48.9.1.noarch",
                  "product_id": "qemu-ipxe-1.0.0-48.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-seabios-1.7.4-48.9.1.noarch",
                "product": {
                  "name": "qemu-seabios-1.7.4-48.9.1.noarch",
                  "product_id": "qemu-seabios-1.7.4-48.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-sgabios-8-48.9.1.noarch",
                "product": {
                  "name": "qemu-sgabios-8-48.9.1.noarch",
                  "product_id": "qemu-sgabios-8-48.9.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-vgabios-1.7.4-48.9.1.noarch",
                "product": {
                  "name": "qemu-vgabios-1.7.4-48.9.1.noarch",
                  "product_id": "qemu-vgabios-1.7.4-48.9.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-2.0.2-48.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-block-curl-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-block-curl-2.0.2-48.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-guest-agent-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-guest-agent-2.0.2-48.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-lang-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-lang-2.0.2-48.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-ppc-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-ppc-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-ppc-2.0.2-48.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.0.2-48.9.1.ppc64le",
                "product": {
                  "name": "qemu-tools-2.0.2-48.9.1.ppc64le",
                  "product_id": "qemu-tools-2.0.2-48.9.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-block-curl-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-block-curl-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-guest-agent-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-guest-agent-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-kvm-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-kvm-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-lang-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-lang-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-s390-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-s390-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-s390-2.0.2-48.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.0.2-48.9.1.s390x",
                "product": {
                  "name": "qemu-tools-2.0.2-48.9.1.s390x",
                  "product_id": "qemu-tools-2.0.2-48.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-block-curl-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-block-curl-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-kvm-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-kvm-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-tools-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-tools-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-x86-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-x86-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-x86-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-block-rbd-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-block-rbd-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-guest-agent-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-guest-agent-2.0.2-48.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.0.2-48.9.1.x86_64",
                "product": {
                  "name": "qemu-lang-2.0.2-48.9.1.x86_64",
                  "product_id": "qemu-lang-2.0.2-48.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12",
                  "product_id": "SUSE Linux Enterprise Desktop 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-48.9.1.noarch as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-seabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-48.9.1.noarch as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-x86-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-48.9.1.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-kvm-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-s390-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-seabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-48.9.1.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-x86-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-48.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-kvm-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-lang-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-s390-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-seabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-48.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-tools-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.7.4-48.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.7.4-48.9.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.0.2-48.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        },
        "product_reference": "qemu-x86-2.0.2-48.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-7815",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-7815"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-7815",
          "url": "https://www.suse.com/security/cve/CVE-2014-7815"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 902737 for CVE-2014-7815",
          "url": "https://bugzilla.suse.com/902737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962627 for CVE-2014-7815",
          "url": "https://bugzilla.suse.com/962627"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-09-28T09:38:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-7815"
    },
    {
      "cve": "CVE-2015-5154",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5154"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5154",
          "url": "https://www.suse.com/security/cve/CVE-2015-5154"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 938344 for CVE-2015-5154",
          "url": "https://bugzilla.suse.com/938344"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 950367 for CVE-2015-5154",
          "url": "https://bugzilla.suse.com/950367"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-09-28T09:38:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5154"
    },
    {
      "cve": "CVE-2015-5278",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5278"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5278",
          "url": "https://www.suse.com/security/cve/CVE-2015-5278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 945989 for CVE-2015-5278",
          "url": "https://bugzilla.suse.com/945989"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 964947 for CVE-2015-5278",
          "url": "https://bugzilla.suse.com/964947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-09-28T09:38:55Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-5278"
    },
    {
      "cve": "CVE-2015-5279",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5279"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5279",
          "url": "https://www.suse.com/security/cve/CVE-2015-5279"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 945987 for CVE-2015-5279",
          "url": "https://bugzilla.suse.com/945987"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-09-28T09:38:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5279"
    },
    {
      "cve": "CVE-2015-6855",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-6855"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-6855",
          "url": "https://www.suse.com/security/cve/CVE-2015-6855"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 945404 for CVE-2015-6855",
          "url": "https://bugzilla.suse.com/945404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 965156 for CVE-2015-6855",
          "url": "https://bugzilla.suse.com/965156"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.9.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-09-28T09:38:55Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-6855"
    }
  ]
}

CVE-2014-7815 (GCVE-0-2014-7815)

Vulnerability from cvelistv5 – Published: 2014-11-14 15:00 – Updated: 2024-08-06 13:03

Summary

The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://secunia.com/advisories/61484	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2015-0624.html	vendor-advisoryx_refsource_REDHAT
	http://secunia.com/advisories/62144	third-party-advisoryx_refsource_SECUNIA
	https://bugzilla.redhat.com/show_bug.cgi?id=1157641	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://secunia.com/advisories/62143	third-party-advisoryx_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2015-0349.html	vendor-advisoryx_refsource_REDHAT
	http://www.debian.org/security/2014/dsa-3067	vendor-advisoryx_refsource_DEBIAN
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6…	x_refsource_CONFIRM
	http://support.citrix.com/article/CTX200892	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2409-1	vendor-advisoryx_refsource_UBUNTU
	http://www.debian.org/security/2014/dsa-3066	vendor-advisoryx_refsource_DEBIAN

Date Public ?

2014-10-27 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:03:27.297Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "61484",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/61484"
          },
          {
            "name": "RHSA-2015:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0624.html"
          },
          {
            "name": "62144",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62144"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157641"
          },
          {
            "name": "SUSE-SU-2015:1782",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
          },
          {
            "name": "62143",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/62143"
          },
          {
            "name": "RHSA-2015:0349",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0349.html"
          },
          {
            "name": "DSA-3067",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3067"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX200892"
          },
          {
            "name": "USN-2409-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2409-1"
          },
          {
            "name": "DSA-3066",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3066"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-10-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-27T17:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "61484",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/61484"
        },
        {
          "name": "RHSA-2015:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0624.html"
        },
        {
          "name": "62144",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62144"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1157641"
        },
        {
          "name": "SUSE-SU-2015:1782",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
        },
        {
          "name": "62143",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/62143"
        },
        {
          "name": "RHSA-2015:0349",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0349.html"
        },
        {
          "name": "DSA-3067",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3067"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e6908bfe8e07f2b452e78e677da1b45b1c0f6829"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX200892"
        },
        {
          "name": "USN-2409-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2409-1"
        },
        {
          "name": "DSA-3066",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3066"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-7815",
    "datePublished": "2014-11-14T15:00:00.000Z",
    "dateReserved": "2014-10-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T13:03:27.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5279 (GCVE-0-2015-5279)

Vulnerability from cvelistv5 – Published: 2015-09-28 16:00 – Updated: 2024-08-06 06:41

Summary

Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.debian.org/security/2015/dsa-3361	vendor-advisoryx_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2015/09/15/3	mailing-listx_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2015-1896.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7a…	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2015-1924.html	vendor-advisoryx_refsource_REDHAT
	http://www.securityfocus.com/bid/76746	vdb-entryx_refsource_BID
	http://www.debian.org/security/2015/dsa-3362	vendor-advisoryx_refsource_DEBIAN
	http://www.securitytracker.com/id/1033569	vdb-entryx_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2015-1923.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-1925.html	vendor-advisoryx_refsource_REDHAT
	https://security.gentoo.org/glsa/201602-01	vendor-advisoryx_refsource_GENTOO
	https://www.arista.com/en/support/advisories-noti…	x_refsource_MISC

Date Public ?

2015-09-15 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:09.328Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3361",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3361"
          },
          {
            "name": "FEDORA-2015-16369",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html"
          },
          {
            "name": "FEDORA-2015-16370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html"
          },
          {
            "name": "[oss-security] 20150915 CVE-2015-5279 Qemu: net: add checks to validate ring buffer pointers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/09/15/3"
          },
          {
            "name": "[Qemu-devel] 20150915 [PULL 2/3] net: add checks to validate ring buffer pointers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html"
          },
          {
            "name": "RHSA-2015:1896",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1896.html"
          },
          {
            "name": "SUSE-SU-2015:1782",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "FEDORA-2015-16368",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html"
          },
          {
            "name": "RHSA-2015:1924",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1924.html"
          },
          {
            "name": "76746",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76746"
          },
          {
            "name": "DSA-3362",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3362"
          },
          {
            "name": "1033569",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033569"
          },
          {
            "name": "RHSA-2015:1923",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1923.html"
          },
          {
            "name": "RHSA-2015:1925",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1925.html"
          },
          {
            "name": "GLSA-201602-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201602-01"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-09-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via vectors related to receiving packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-05T17:02:34.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-3361",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3361"
        },
        {
          "name": "FEDORA-2015-16369",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html"
        },
        {
          "name": "FEDORA-2015-16370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html"
        },
        {
          "name": "[oss-security] 20150915 CVE-2015-5279 Qemu: net: add checks to validate ring buffer pointers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/09/15/3"
        },
        {
          "name": "[Qemu-devel] 20150915 [PULL 2/3] net: add checks to validate ring buffer pointers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html"
        },
        {
          "name": "RHSA-2015:1896",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1896.html"
        },
        {
          "name": "SUSE-SU-2015:1782",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7aa2bcad0ca837dd6d4bf4fa38a80314b4a6b755"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "FEDORA-2015-16368",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html"
        },
        {
          "name": "RHSA-2015:1924",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1924.html"
        },
        {
          "name": "76746",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76746"
        },
        {
          "name": "DSA-3362",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3362"
        },
        {
          "name": "1033569",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033569"
        },
        {
          "name": "RHSA-2015:1923",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1923.html"
        },
        {
          "name": "RHSA-2015:1925",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1925.html"
        },
        {
          "name": "GLSA-201602-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201602-01"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5279",
    "datePublished": "2015-09-28T16:00:00.000Z",
    "dateReserved": "2015-07-01T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:41:09.328Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-6855 (GCVE-0-2015-6855)

Vulnerability from cvelistv5 – Published: 2015-11-06 21:00 – Updated: 2024-08-06 07:36

Summary

hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.debian.org/security/2015/dsa-3361	vendor-advisoryx_refsource_DEBIAN
	http://www.securityfocus.com/bid/76691	vdb-entryx_refsource_BID
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2015/09/10/2	mailing-listx_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2015/09/10/1	mailing-listx_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://www.debian.org/security/2015/dsa-3362	vendor-advisoryx_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2745-1	vendor-advisoryx_refsource_UBUNTU
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	https://security.gentoo.org/glsa/201602-01	vendor-advisoryx_refsource_GENTOO
	https://www.arista.com/en/support/advisories-noti…	x_refsource_MISC

Date Public ?

2015-09-07 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:36:34.777Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3361",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3361"
          },
          {
            "name": "76691",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76691"
          },
          {
            "name": "FEDORA-2015-16369",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html"
          },
          {
            "name": "FEDORA-2015-16370",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html"
          },
          {
            "name": "FEDORA-2015-d6ea74993a",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169341.html"
          },
          {
            "name": "[oss-security] 20150910 Re: CVE request Qemu: ide: divide by zero issue",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/09/10/2"
          },
          {
            "name": "SUSE-SU-2015:1782",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
          },
          {
            "name": "[oss-security] 20150910 CVE request Qemu: ide: divide by zero issue",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/09/10/1"
          },
          {
            "name": "FEDORA-2015-16368",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html"
          },
          {
            "name": "DSA-3362",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3362"
          },
          {
            "name": "USN-2745-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2745-1"
          },
          {
            "name": "FEDORA-2015-8dc71ade88",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168602.html"
          },
          {
            "name": "[Qemu-devel] 20150907 [PATCH] ide: fix ATAPI command permissions",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg02479.html"
          },
          {
            "name": "FEDORA-2015-4896530727",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169327.html"
          },
          {
            "name": "GLSA-201602-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201602-01"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-09-07T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-05T17:00:18.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "DSA-3361",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3361"
        },
        {
          "name": "76691",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76691"
        },
        {
          "name": "FEDORA-2015-16369",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html"
        },
        {
          "name": "FEDORA-2015-16370",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html"
        },
        {
          "name": "FEDORA-2015-d6ea74993a",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169341.html"
        },
        {
          "name": "[oss-security] 20150910 Re: CVE request Qemu: ide: divide by zero issue",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/09/10/2"
        },
        {
          "name": "SUSE-SU-2015:1782",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
        },
        {
          "name": "[oss-security] 20150910 CVE request Qemu: ide: divide by zero issue",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/09/10/1"
        },
        {
          "name": "FEDORA-2015-16368",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html"
        },
        {
          "name": "DSA-3362",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3362"
        },
        {
          "name": "USN-2745-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2745-1"
        },
        {
          "name": "FEDORA-2015-8dc71ade88",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168602.html"
        },
        {
          "name": "[Qemu-devel] 20150907 [PATCH] ide: fix ATAPI command permissions",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg02479.html"
        },
        {
          "name": "FEDORA-2015-4896530727",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169327.html"
        },
        {
          "name": "GLSA-201602-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201602-01"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-6855",
    "datePublished": "2015-11-06T21:00:00.000Z",
    "dateReserved": "2015-09-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T07:36:34.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5278 (GCVE-0-2015-5278)

Vulnerability from cvelistv5 – Published: 2020-01-23 19:40 – Updated: 2024-08-06 06:41

Summary

The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.

Severity ?

No CVSS data available.

CWE

Other

Assigner

redhat

References

URL

Tags

	http://lists.fedoraproject.org/pipermail/package-…	x_refsource_MISC
	http://lists.fedoraproject.org/pipermail/package-…	x_refsource_MISC
	http://lists.fedoraproject.org/pipermail/package-…	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-2745-1	x_refsource_MISC
	https://lists.gnu.org/archive/html/qemu-devel/201…	x_refsource_MISC
	https://lists.gnu.org/archive/html/qemu-devel/201…	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2015/09/15/2	x_refsource_MISC
	https://www.arista.com/en/support/advisories-noti…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	QEMU	QEMU	Affected: before 2.4.0.1

Date Public ?

2015-09-15 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:09.527Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2745-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03985.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/09/15/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "QEMU",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "before 2.4.0.1"
            }
          ]
        }
      ],
      "datePublic": "2015-09-15T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Other",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-05T17:03:31.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2745-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg05832.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03985.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/09/15/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1188-security-advisory-14"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5278",
    "datePublished": "2020-01-23T19:40:18.000Z",
    "dateReserved": "2015-07-01T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:41:09.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2015-5154 (GCVE-0-2015-5154)

Vulnerability from cvelistv5 – Published: 2015-08-12 14:00 – Updated: 2024-08-06 06:32

Summary

Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.

Severity ?

No CVSS data available.

CWE

n/a

Assigner

redhat

References

URL

Tags

	http://www.securityfocus.com/bid/76048	vdb-entryx_refsource_BID
	http://xenbits.xen.org/xsa/advisory-138.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://security.gentoo.org/glsa/201510-02	vendor-advisoryx_refsource_GENTOO
	http://www.securitytracker.com/id/1033074	vdb-entryx_refsource_SECTRACK
	http://www.debian.org/security/2015/dsa-3348	vendor-advisoryx_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2015-1508.html	vendor-advisoryx_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-1507.html	vendor-advisoryx_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2015-1512.html	vendor-advisoryx_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	https://security.gentoo.org/glsa/201604-03	vendor-advisoryx_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
	http://support.citrix.com/article/CTX201593	x_refsource_CONFIRM
	http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public ?

2015-07-27 00:00

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:32:32.900Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "76048",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/76048"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-138.html"
          },
          {
            "name": "SUSE-SU-2015:1643",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html"
          },
          {
            "name": "GLSA-201510-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201510-02"
          },
          {
            "name": "1033074",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033074"
          },
          {
            "name": "DSA-3348",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3348"
          },
          {
            "name": "SUSE-SU-2015:1782",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
          },
          {
            "name": "RHSA-2015:1508",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html"
          },
          {
            "name": "RHSA-2015:1507",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html"
          },
          {
            "name": "FEDORA-2015-12714",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.html"
          },
          {
            "name": "RHSA-2015:1512",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html"
          },
          {
            "name": "SUSE-SU-2015:1455",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.html"
          },
          {
            "name": "SUSE-SU-2015:1299",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html"
          },
          {
            "name": "SUSE-SU-2015:1426",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html"
          },
          {
            "name": "FEDORA-2015-12657",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.html"
          },
          {
            "name": "SUSE-SU-2015:1421",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html"
          },
          {
            "name": "GLSA-201604-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201604-03"
          },
          {
            "name": "SUSE-SU-2015:1302",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html"
          },
          {
            "name": "SUSE-SU-2015:1409",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX201593"
          },
          {
            "name": "FEDORA-2015-12679",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-27T17:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "76048",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/76048"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-138.html"
        },
        {
          "name": "SUSE-SU-2015:1643",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00027.html"
        },
        {
          "name": "GLSA-201510-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201510-02"
        },
        {
          "name": "1033074",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033074"
        },
        {
          "name": "DSA-3348",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3348"
        },
        {
          "name": "SUSE-SU-2015:1782",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html"
        },
        {
          "name": "RHSA-2015:1508",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1508.html"
        },
        {
          "name": "RHSA-2015:1507",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1507.html"
        },
        {
          "name": "FEDORA-2015-12714",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163681.html"
        },
        {
          "name": "RHSA-2015:1512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1512.html"
        },
        {
          "name": "SUSE-SU-2015:1455",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00022.html"
        },
        {
          "name": "SUSE-SU-2015:1299",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00041.html"
        },
        {
          "name": "SUSE-SU-2015:1426",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00020.html"
        },
        {
          "name": "FEDORA-2015-12657",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163658.html"
        },
        {
          "name": "SUSE-SU-2015:1421",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00018.html"
        },
        {
          "name": "GLSA-201604-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201604-03"
        },
        {
          "name": "SUSE-SU-2015:1302",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00042.html"
        },
        {
          "name": "SUSE-SU-2015:1409",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX201593"
        },
        {
          "name": "FEDORA-2015-12679",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163472.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-5154",
    "datePublished": "2015-08-12T14:00:00.000Z",
    "dateReserved": "2015-07-01T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:32:32.900Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.