Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2012-3515 (GCVE-0-2012-3515)
Vulnerability from cvelistv5
Published
2012-11-23 20:00
Modified
2024-08-06 20:05
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T20:05:12.755Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "55082",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/55082"
},
{
"name": "50528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50528"
},
{
"name": "RHSA-2012:1234",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"name": "50530",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50530"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"name": "51413",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "GLSA-201309-24",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"name": "50689",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50689"
},
{
"name": "DSA-2543",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"name": "SUSE-SU-2012:1135",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"name": "50632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50632"
},
{
"name": "RHSA-2012:1325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "RHSA-2012:1236",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"name": "SUSE-SU-2012:1205",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"name": "SUSE-SU-2012:1202",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"name": "50913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50913"
},
{
"name": "openSUSE-SU-2012:1572",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "50472",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50472"
},
{
"name": "openSUSE-SU-2012:1170",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"name": "USN-1590-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "http://www.ubuntu.com/usn/USN-1590-1"
},
{
"name": "RHSA-2012:1262",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "openSUSE-SU-2012:1153",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"name": "SUSE-SU-2012:1203",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"name": "55413",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/55413"
},
{
"name": "SUSE-SU-2012:1162",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"name": "openSUSE-SU-2012:1174",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"name": "SUSE-SU-2012:1320",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"name": "GLSA-201604-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"name": "RHSA-2012:1233",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"name": "SUSE-SU-2012:1132",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://support.citrix.com/article/CTX134708"
},
{
"name": "DSA-2545",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"name": "SUSE-SU-2012:1129",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"name": "[Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"name": "SUSE-SU-2012:1133",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"name": "RHSA-2012:1235",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"name": "openSUSE-SU-2012:1573",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "[oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"name": "openSUSE-SU-2012:1172",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"name": "50860",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/50860"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-09-05T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\""
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-06-30T16:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "55082",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/55082"
},
{
"name": "50528",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50528"
},
{
"name": "RHSA-2012:1234",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"name": "50530",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50530"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"name": "51413",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "GLSA-201309-24",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"name": "50689",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50689"
},
{
"name": "DSA-2543",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"name": "SUSE-SU-2012:1135",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"name": "50632",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50632"
},
{
"name": "RHSA-2012:1325",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "RHSA-2012:1236",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"name": "SUSE-SU-2012:1205",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"name": "SUSE-SU-2012:1202",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"name": "50913",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50913"
},
{
"name": "openSUSE-SU-2012:1572",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "50472",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50472"
},
{
"name": "openSUSE-SU-2012:1170",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"name": "USN-1590-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "http://www.ubuntu.com/usn/USN-1590-1"
},
{
"name": "RHSA-2012:1262",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "openSUSE-SU-2012:1153",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"name": "SUSE-SU-2012:1203",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"name": "55413",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/55413"
},
{
"name": "SUSE-SU-2012:1162",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"name": "openSUSE-SU-2012:1174",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"name": "SUSE-SU-2012:1320",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"name": "GLSA-201604-03",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"name": "RHSA-2012:1233",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"name": "SUSE-SU-2012:1132",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://support.citrix.com/article/CTX134708"
},
{
"name": "DSA-2545",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"name": "SUSE-SU-2012:1129",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"name": "[Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"name": "SUSE-SU-2012:1133",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"name": "RHSA-2012:1235",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"name": "openSUSE-SU-2012:1573",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "[oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"name": "openSUSE-SU-2012:1172",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"name": "50860",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/50860"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2012-3515",
"datePublished": "2012-11-23T20:00:00",
"dateReserved": "2012-06-14T00:00:00",
"dateUpdated": "2024-08-06T20:05:12.755Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2012-3515\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-11-23T20:55:03.523\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \\\"device model\u0027s address space.\\\"\"},{\"lang\":\"es\",\"value\":\"Qemu, tal como se utiliza en Xen v4.0, v4.1 y posiblemente otros productos, al emular ciertos dispositivos con una consola virtual, permite a los usuarios locales del SO invitado obtener privilegios a trav\u00e9s de una secuencia VT100 de escape manipulada que desencadena la sobrescritura del espacio de direcciones de un \\\"device model\u0027s address space.\\\"\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.2.0\",\"matchCriteriaId\":\"03FB8819-CA76-4C31-A901-6ACCB8325928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"550223A9-B9F1-440A-8C25-9F0F76AF7301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D532B60-C8DD-4A2F-9D05-E574D23EB754\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE554781-1EB9-446E-911F-6C11970C47F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D806A17E-B8F9-466D-807D-3F1E77603DC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0545634-EC4A-48E8-AB3D-49802FB11758\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"00720D8C-3FF3-4B1C-B74B-91F01A544399\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"22A79A35-05DB-4B9F-AD3E-EA6F933CF10C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*\",\"matchCriteriaId\":\"CED02712-1031-4206-AC4D-E68710F46EC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A53FF936-C785-4CEF-BAD0-3C3EB90EE466\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*\",\"matchCriteriaId\":\"67960FB9-13D1-4DEE-8158-31BF31BCBE6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*\",\"matchCriteriaId\":\"88D6E858-FD8F-4C55-B7D5-CEEDA2BBA898\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*\",\"matchCriteriaId\":\"DB4D6749-81A1-41D7-BF4F-1C45A7F49A22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*\",\"matchCriteriaId\":\"436EF2ED-FDBB-4B64-8EC4-33C3E4253F06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AA37837-3083-4DC7-94F4-54FD5D7CB53C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D86166F9-BBF0-4650-8CCD-0F9C97104D21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCFEF451-4B77-4259-8000-B252E699A950\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37BA55FC-D350-4DEB-9802-40AF59C99E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"133AAFA7-AF42-4D7B-8822-AA2E85611BF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8382A145-CDD9-437E-9DE7-A349956778B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54D669D4-6D7E-449D-80C1-28FA44F06FFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"036E8A89-7A16-411F-9D31-676313BB7244\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"16F59A04-14CF-49E2-9973-645477EA09DA\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*\",\"matchCriteriaId\":\"01EDA41C-6B2E-49AF-B503-EB3882265C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF49D26F-142E-468B-87C1-BABEA445255C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4174F4F-149E-41A6-BBCC-D01114C05F38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*\",\"matchCriteriaId\":\"8D305F7A-D159-4716-AB26-5E38BB5CD991\"}]}]}],\"references\":[{\"url\":\"http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1233.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1234.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1235.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1236.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1262.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1325.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50472\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50528\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50530\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50632\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50689\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50860\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50913\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51413\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/55082\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201309-24.xml\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.citrix.com/article/CTX134708\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2543\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2545\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/09/05/10\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55413\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-1590-1\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201604-03\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1233.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1234.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1235.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1236.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1262.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2012-1325.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50472\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50528\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50530\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50632\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50689\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50860\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/50913\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/51413\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://secunia.com/advisories/55082\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201309-24.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://support.citrix.com/article/CTX134708\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2543\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2012/dsa-2545\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/09/05/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/55413\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ubuntu.com/usn/USN-1590-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201604-03\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
rhsa-2012:1234
Vulnerability from csaf_redhat
Published
2012-09-05 16:39
Modified
2024-11-22 05:47
Summary
Red Hat Security Advisory: qemu-kvm security update
Notes
Topic
Updated qemu-kvm packages that fix one security issue are now available for
Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space
component for running virtual machines using KVM.
A flaw was found in the way QEMU handled VT100 terminal escape sequences
when emulating certain character devices. A guest user with privileges to
write to a character device that is emulated on the host using a virtual
console back-end could use this flaw to crash the qemu-kvm process on the
host or, possibly, escalate their privileges on the host. (CVE-2012-3515)
This flaw did not affect the default use of KVM. Affected configurations
were:
* When guests were started from the command line ("/usr/libexec/qemu-kvm")
without the "-nodefaults" option, and also without specifying a
serial or parallel device, or a virtio-console device, that specifically
does not use a virtual console (vc) back-end. (Note that Red Hat does not
support invoking "qemu-kvm" from the command line without "-nodefaults" on
Red Hat Enterprise Linux 6.)
* Guests that were managed via libvirt, such as when using Virtual Machine
Manager (virt-manager), but that have a serial or parallel device, or a
virtio-console device, that uses a virtual console back-end. By default,
guests managed via libvirt will not use a virtual console back-end
for such devices.
Red Hat would like to thank the Xen project for reporting this issue.
All users of qemu-kvm should upgrade to these updated packages, which
resolve this issue. After installing this update, shut down all running
virtual machines. Once all virtual machines have shut down, start them
again for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated qemu-kvm packages that fix one security issue are now available for\nRed Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. qemu-kvm is the user-space\ncomponent for running virtual machines using KVM.\n\nA flaw was found in the way QEMU handled VT100 terminal escape sequences\nwhen emulating certain character devices. A guest user with privileges to\nwrite to a character device that is emulated on the host using a virtual\nconsole back-end could use this flaw to crash the qemu-kvm process on the\nhost or, possibly, escalate their privileges on the host. (CVE-2012-3515)\n\nThis flaw did not affect the default use of KVM. Affected configurations\nwere:\n\n* When guests were started from the command line (\"/usr/libexec/qemu-kvm\")\nwithout the \"-nodefaults\" option, and also without specifying a\nserial or parallel device, or a virtio-console device, that specifically\ndoes not use a virtual console (vc) back-end. (Note that Red Hat does not\nsupport invoking \"qemu-kvm\" from the command line without \"-nodefaults\" on\nRed Hat Enterprise Linux 6.)\n\n* Guests that were managed via libvirt, such as when using Virtual Machine\nManager (virt-manager), but that have a serial or parallel device, or a\nvirtio-console device, that uses a virtual console back-end. By default,\nguests managed via libvirt will not use a virtual console back-end\nfor such devices.\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nAll users of qemu-kvm should upgrade to these updated packages, which\nresolve this issue. After installing this update, shut down all running\nvirtual machines. Once all virtual machines have shut down, start them\nagain for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1234",
"url": "https://access.redhat.com/errata/RHSA-2012:1234"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1234.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm security update",
"tracking": {
"current_release_date": "2024-11-22T05:47:14+00:00",
"generator": {
"date": "2024-11-22T05:47:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:1234",
"initial_release_date": "2012-09-05T16:39:00+00:00",
"revision_history": [
{
"date": "2012-09-05T16:39:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-09-05T16:46:06+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:47:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-guest-agent@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-debuginfo@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"product": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"product_id": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm@0.12.1.2-2.295.el6_3.2?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Client-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)",
"product_id": "6ComputeNode-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6ComputeNode-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Workstation-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Workstation-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"relates_to_product_reference": "6Workstation-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Workstation-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Workstation-6.3.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Workstation-6.3.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-3515",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "851252"
}
],
"notes": [
{
"category": "description",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: VT100 emulation vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of xen package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of qemu-kvm package as shipped with Red Hat\nEnterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Client-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "RHBZ#851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
}
],
"release_date": "2012-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-09-05T16:39:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Client-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1234"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Client-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Client-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Client-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6ComputeNode-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6ComputeNode-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-guest-agent-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-img-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.src",
"6Workstation-6.3.z:qemu-kvm-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Workstation-6.3.z:qemu-kvm-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qemu: VT100 emulation vulnerability"
}
]
}
rhsa-2012:1236
Vulnerability from csaf_redhat
Published
2012-09-05 16:47
Modified
2024-11-22 05:47
Summary
Red Hat Security Advisory: xen security update
Notes
Topic
Updated xen packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.
Details
The xen packages contain administration tools and the xend service for
managing the kernel-xen kernel for virtualization on Red Hat Enterprise
Linux.
A flaw was found in the way QEMU handled VT100 terminal escape sequences
when emulating certain character devices. A guest user with privileges to
write to a character device that is emulated on the host using a virtual
console back-end could use this flaw to crash the qemu process on the
host or, possibly, escalate their privileges on the host. (CVE-2012-3515)
This flaw did not affect the default use of the Xen hypervisor
implementation in Red Hat Enterprise Linux 5. This problem only affected
fully-virtualized guests that have a serial or parallel device that uses a
virtual console (vc) back-end. By default, the virtual console back-end is
not used for such devices; only guests explicitly configured to use them
in this way were affected.
Red Hat would like to thank the Xen project for reporting this issue.
All users of xen are advised to upgrade to these updated packages, which
correct this issue. After installing the updated packages, all
fully-virtualized guests must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated xen packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The xen packages contain administration tools and the xend service for\nmanaging the kernel-xen kernel for virtualization on Red Hat Enterprise\nLinux.\n\nA flaw was found in the way QEMU handled VT100 terminal escape sequences\nwhen emulating certain character devices. A guest user with privileges to\nwrite to a character device that is emulated on the host using a virtual\nconsole back-end could use this flaw to crash the qemu process on the\nhost or, possibly, escalate their privileges on the host. (CVE-2012-3515)\n\nThis flaw did not affect the default use of the Xen hypervisor\nimplementation in Red Hat Enterprise Linux 5. This problem only affected\nfully-virtualized guests that have a serial or parallel device that uses a\nvirtual console (vc) back-end. By default, the virtual console back-end is\nnot used for such devices; only guests explicitly configured to use them\nin this way were affected.\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nAll users of xen are advised to upgrade to these updated packages, which\ncorrect this issue. After installing the updated packages, all\nfully-virtualized guests must be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1236",
"url": "https://access.redhat.com/errata/RHSA-2012:1236"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1236.json"
}
],
"title": "Red Hat Security Advisory: xen security update",
"tracking": {
"current_release_date": "2024-11-22T05:47:23+00:00",
"generator": {
"date": "2024-11-22T05:47:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:1236",
"initial_release_date": "2012-09-05T16:47:00+00:00",
"revision_history": [
{
"date": "2012-09-05T16:47:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-09-05T16:56:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:47:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEL Desktop Multi OS (v. 5 client)",
"product": {
"name": "RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::client"
}
}
},
{
"category": "product_name",
"name": "RHEL Virtualization (v. 5 server)",
"product": {
"name": "RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"product": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"product_id": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-135.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-135.el5_8.5.x86_64",
"product": {
"name": "xen-0:3.0.3-135.el5_8.5.x86_64",
"product_id": "xen-0:3.0.3-135.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-135.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"product": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"product_id": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-135.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"product": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"product_id": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-135.el5_8.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"product": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"product_id": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-135.el5_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"product": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"product_id": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-135.el5_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-135.el5_8.5.i386",
"product": {
"name": "xen-0:3.0.3-135.el5_8.5.i386",
"product_id": "xen-0:3.0.3-135.el5_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-135.el5_8.5?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"product": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"product_id": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-135.el5_8.5?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"product": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"product_id": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-135.el5_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-135.el5_8.5.ia64",
"product": {
"name": "xen-0:3.0.3-135.el5_8.5.ia64",
"product_id": "xen-0:3.0.3-135.el5_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-135.el5_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"product": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"product_id": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-135.el5_8.5?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"product": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"product_id": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-135.el5_8.5?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-0:3.0.3-135.el5_8.5.src",
"product": {
"name": "xen-0:3.0.3-135.el5_8.5.src",
"product_id": "xen-0:3.0.3-135.el5_8.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-135.el5_8.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.src"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.src",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.src as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.src",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.src"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.src",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.src as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.src",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.i386",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.ia64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-135.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-3515",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "851252"
}
],
"notes": [
{
"category": "description",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: VT100 emulation vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of xen package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of qemu-kvm package as shipped with Red Hat\nEnterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "RHBZ#851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
}
],
"release_date": "2012-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-09-05T16:47:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1236"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Client-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Client-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.src",
"5Server-VT-5.8.Z:xen-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-debuginfo-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-devel-0:3.0.3-135.el5_8.5.x86_64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.i386",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.ia64",
"5Server-VT-5.8.Z:xen-libs-0:3.0.3-135.el5_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qemu: VT100 emulation vulnerability"
}
]
}
rhsa-2012:1235
Vulnerability from csaf_redhat
Published
2012-09-05 16:43
Modified
2024-11-22 05:47
Summary
Red Hat Security Advisory: kvm security update
Notes
Topic
Updated kvm packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built
for the standard Red Hat Enterprise Linux kernel.
A flaw was found in the way QEMU handled VT100 terminal escape sequences
when emulating certain character devices. A guest user with privileges to
write to a character device that is emulated on the host using a virtual
console back-end could use this flaw to crash the qemu-kvm process on the
host or, possibly, escalate their privileges on the host. (CVE-2012-3515)
This flaw did not affect the default use of KVM. Affected configurations
were:
* When guests were started from the command line ("/usr/libexec/qemu-kvm"),
and without specifying a serial or parallel device that specifically does
not use a virtual console (vc) back-end. (Note that Red Hat does not
support invoking "qemu-kvm" from the command line on Red Hat Enterprise
Linux 5.)
* Guests that were managed via libvirt, such as when using Virtual Machine
Manager (virt-manager), but that have a serial or parallel device that uses
a virtual console back-end. By default, guests managed via libvirt will not
use a virtual console back-end for such devices.
Red Hat would like to thank the Xen project for reporting this issue.
All KVM users should upgrade to these updated packages, which correct this
issue. Note: The procedure in the Solution section must be performed before
this update will take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated kvm packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built\nfor the standard Red Hat Enterprise Linux kernel.\n\nA flaw was found in the way QEMU handled VT100 terminal escape sequences\nwhen emulating certain character devices. A guest user with privileges to\nwrite to a character device that is emulated on the host using a virtual\nconsole back-end could use this flaw to crash the qemu-kvm process on the\nhost or, possibly, escalate their privileges on the host. (CVE-2012-3515)\n\nThis flaw did not affect the default use of KVM. Affected configurations\nwere:\n\n* When guests were started from the command line (\"/usr/libexec/qemu-kvm\"),\nand without specifying a serial or parallel device that specifically does\nnot use a virtual console (vc) back-end. (Note that Red Hat does not\nsupport invoking \"qemu-kvm\" from the command line on Red Hat Enterprise\nLinux 5.)\n\n* Guests that were managed via libvirt, such as when using Virtual Machine\nManager (virt-manager), but that have a serial or parallel device that uses\na virtual console back-end. By default, guests managed via libvirt will not\nuse a virtual console back-end for such devices.\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nAll KVM users should upgrade to these updated packages, which correct this\nissue. Note: The procedure in the Solution section must be performed before\nthis update will take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1235",
"url": "https://access.redhat.com/errata/RHSA-2012:1235"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1235.json"
}
],
"title": "Red Hat Security Advisory: kvm security update",
"tracking": {
"current_release_date": "2024-11-22T05:47:19+00:00",
"generator": {
"date": "2024-11-22T05:47:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:1235",
"initial_release_date": "2012-09-05T16:43:00+00:00",
"revision_history": [
{
"date": "2012-09-05T16:43:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-09-05T16:45:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:47:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEL Desktop Multi OS (v. 5 client)",
"product": {
"name": "RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::client"
}
}
},
{
"category": "product_name",
"name": "RHEL Virtualization (v. 5 server)",
"product": {
"name": "RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"product_id": "kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kvm-debuginfo@83-249.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kvm-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kvm-0:83-249.el5_8.5.x86_64",
"product_id": "kvm-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kvm@83-249.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kmod-kvm-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kmod-kvm-0:83-249.el5_8.5.x86_64",
"product_id": "kmod-kvm-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kmod-kvm@83-249.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"product_id": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kmod-kvm-debug@83-249.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"product_id": "kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kvm-qemu-img@83-249.el5_8.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kvm-tools-0:83-249.el5_8.5.x86_64",
"product": {
"name": "kvm-tools-0:83-249.el5_8.5.x86_64",
"product_id": "kvm-tools-0:83-249.el5_8.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kvm-tools@83-249.el5_8.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kvm-0:83-249.el5_8.5.src",
"product": {
"name": "kvm-0:83-249.el5_8.5.src",
"product_id": "kvm-0:83-249.el5_8.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kvm@83-249.el5_8.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kmod-kvm-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kmod-kvm-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0:83-249.el5_8.5.src as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.src"
},
"product_reference": "kvm-0:83-249.el5_8.5.src",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-debuginfo-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-qemu-img-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-tools-0:83-249.el5_8.5.x86_64 as a component of RHEL Desktop Multi OS (v. 5 client)",
"product_id": "5Client-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-tools-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Client-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kmod-kvm-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kmod-kvm-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0:83-249.el5_8.5.src as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.src"
},
"product_reference": "kvm-0:83-249.el5_8.5.src",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-debuginfo-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-qemu-img-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-tools-0:83-249.el5_8.5.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64"
},
"product_reference": "kvm-tools-0:83-249.el5_8.5.x86_64",
"relates_to_product_reference": "5Server-VT-5.8.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-3515",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "851252"
}
],
"notes": [
{
"category": "description",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: VT100 emulation vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of xen package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of qemu-kvm package as shipped with Red Hat\nEnterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "RHBZ#851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
}
],
"release_date": "2012-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-09-05T16:43:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
"product_ids": [
"5Client-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1235"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"5Client-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Client-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Client-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kmod-kvm-debug-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.src",
"5Server-VT-5.8.Z:kvm-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-debuginfo-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-qemu-img-0:83-249.el5_8.5.x86_64",
"5Server-VT-5.8.Z:kvm-tools-0:83-249.el5_8.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qemu: VT100 emulation vulnerability"
}
]
}
rhsa-2012:1325
Vulnerability from csaf_redhat
Published
2012-10-02 17:09
Modified
2024-11-22 05:47
Summary
Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
Notes
Topic
An updated rhev-hypervisor6 package that fixes multiple security issues and
one bug is now available.
The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.
Details
The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization
Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor
is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes
everything necessary to run and manage virtual machines: A subset of the
Red Hat Enterprise Linux operating environment and the Red Hat Enterprise
Virtualization Agent.
Note: Red Hat Enterprise Virtualization Hypervisor is only available for
the Intel 64 and AMD64 architectures with virtualization extensions.
A flaw was found in the way QEMU handled VT100 terminal escape sequences
when emulating certain character devices. A guest user with privileges to
write to a character device that is emulated on the host using a virtual
console back-end could use this flaw to crash the qemu-kvm process on the
host or, possibly, escalate their privileges on the host. (CVE-2012-3515)
This flaw did not affect the default use of Red Hat Enterprise
Virtualization Hypervisor: it is not possible to add a device that uses a
virtual console back-end via Red Hat Enterprise Virtualization Manager.
To specify a virtual console back-end for a device and therefore be
vulnerable to this issue, the device would have to be created another way,
for example, by using a VDSM hook. Note that at this time hooks can only be
used on Red Hat Enterprise Linux hosts, not Red Hat Enterprise
Virtualization Hypervisor.
Multiple integer overflow flaws, leading to stack-based buffer overflows,
were found in glibc's functions for converting a string to a numeric
representation (strtod(), strtof(), and strtold()). If an application used
such a function on attacker controlled input, it could cause the
application to crash or, potentially, execute arbitrary code.
(CVE-2012-3480)
Red Hat would like to thank the Xen project for reporting the CVE-2012-3515
issue.
This updated package provides updated components that include fixes for
various security issues. These issues have no security impact on Red Hat
Enterprise Virtualization Hypervisor itself, however. The security fixes
included in this update address the following CVE numbers:
CVE-2012-4244 (bind issue)
CVE-2012-3524 (dbus issue)
CVE-2012-2313, CVE-2012-2384, CVE-2012-2390, CVE-2012-3430, and
CVE-2012-3552 (kernel issues)
CVE-2012-3445 (libvirt issue)
CVE-2011-3102 and CVE-2012-2807 (libxml2 issues)
CVE-2011-1202, CVE-2011-3970, CVE-2012-2825, CVE-2012-2870, CVE-2012-2871,
and CVE-2012-2893 (libxslt issues)
This updated Red Hat Enterprise Virtualization Hypervisor package also
fixes the following bug:
* Previously, the Manager listed all installed Hypervisor ISO images as
available even when they did not support the VDSM compatibility version
required by the selected host. The rhev-hypervisor6 package now maintains a
text file for each installed ISO image. The file lists the VDSM
compatibility versions supported by the relevant ISO image. The Manager
uses this information to ensure that only those Hypervisor ISO images that
are relevant to the selected host are listed. (BZ#856827)
Users of the Red Hat Enterprise Virtualization Hypervisor are advised to
upgrade to this updated package, which fixes these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated rhev-hypervisor6 package that fixes multiple security issues and\none bug is now available.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization\nHypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor\nis a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes\neverything necessary to run and manage virtual machines: A subset of the\nRed Hat Enterprise Linux operating environment and the Red Hat Enterprise\nVirtualization Agent.\n\nNote: Red Hat Enterprise Virtualization Hypervisor is only available for\nthe Intel 64 and AMD64 architectures with virtualization extensions.\n\nA flaw was found in the way QEMU handled VT100 terminal escape sequences\nwhen emulating certain character devices. A guest user with privileges to\nwrite to a character device that is emulated on the host using a virtual\nconsole back-end could use this flaw to crash the qemu-kvm process on the\nhost or, possibly, escalate their privileges on the host. (CVE-2012-3515)\n\nThis flaw did not affect the default use of Red Hat Enterprise\nVirtualization Hypervisor: it is not possible to add a device that uses a\nvirtual console back-end via Red Hat Enterprise Virtualization Manager.\n\nTo specify a virtual console back-end for a device and therefore be\nvulnerable to this issue, the device would have to be created another way,\nfor example, by using a VDSM hook. Note that at this time hooks can only be\nused on Red Hat Enterprise Linux hosts, not Red Hat Enterprise\nVirtualization Hypervisor.\n\nMultiple integer overflow flaws, leading to stack-based buffer overflows,\nwere found in glibc\u0027s functions for converting a string to a numeric\nrepresentation (strtod(), strtof(), and strtold()). If an application used\nsuch a function on attacker controlled input, it could cause the\napplication to crash or, potentially, execute arbitrary code.\n(CVE-2012-3480)\n\nRed Hat would like to thank the Xen project for reporting the CVE-2012-3515\nissue.\n\nThis updated package provides updated components that include fixes for\nvarious security issues. These issues have no security impact on Red Hat\nEnterprise Virtualization Hypervisor itself, however. The security fixes\nincluded in this update address the following CVE numbers:\n\nCVE-2012-4244 (bind issue)\n\nCVE-2012-3524 (dbus issue)\n\nCVE-2012-2313, CVE-2012-2384, CVE-2012-2390, CVE-2012-3430, and\nCVE-2012-3552 (kernel issues)\n\nCVE-2012-3445 (libvirt issue)\n\nCVE-2011-3102 and CVE-2012-2807 (libxml2 issues)\n\nCVE-2011-1202, CVE-2011-3970, CVE-2012-2825, CVE-2012-2870, CVE-2012-2871,\nand CVE-2012-2893 (libxslt issues)\n\nThis updated Red Hat Enterprise Virtualization Hypervisor package also\nfixes the following bug:\n\n* Previously, the Manager listed all installed Hypervisor ISO images as\navailable even when they did not support the VDSM compatibility version\nrequired by the selected host. The rhev-hypervisor6 package now maintains a\ntext file for each installed ISO image. The file lists the VDSM\ncompatibility versions supported by the relevant ISO image. The Manager\nuses this information to ensure that only those Hypervisor ISO images that\nare relevant to the selected host are listed. (BZ#856827)\n\nUsers of the Red Hat Enterprise Virtualization Hypervisor are advised to\nupgrade to this updated package, which fixes these issues.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1325",
"url": "https://access.redhat.com/errata/RHSA-2012:1325"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"url": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html"
},
{
"category": "external",
"summary": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"url": "https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html"
},
{
"category": "external",
"summary": "847715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847715"
},
{
"category": "external",
"summary": "851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "856827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=856827"
},
{
"category": "external",
"summary": "856830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=856830"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1325.json"
}
],
"title": "Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T05:47:27+00:00",
"generator": {
"date": "2024-11-22T05:47:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:1325",
"initial_release_date": "2012-10-02T17:09:00+00:00",
"revision_history": [
{
"date": "2012-10-02T17:09:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-10-02T17:10:14+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:47:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV Hypervisor for RHEL-6",
"product": {
"name": "RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch",
"product": {
"name": "rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch",
"product_id": "rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rhev-hypervisor6@6.3-20120926.0.el6_3?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch as a component of RHEV Hypervisor for RHEL-6",
"product_id": "6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
},
"product_reference": "rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch",
"relates_to_product_reference": "6Server-RHEV-Hypervisor"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-3480",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2012-08-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "847715"
}
],
"notes": [
{
"category": "description",
"text": "Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified \"related functions\" in stdlib in GNU C Library (aka glibc or libc6) 2.16 allow local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3480"
},
{
"category": "external",
"summary": "RHBZ#847715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3480",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3480"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3480",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3480"
}
],
"release_date": "2012-08-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-10-02T17:09:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization 2.2\nenvironments using the disk image provided by this package, refer to: \n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization 3.0\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1325"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: Integer overflows, leading to stack-based buffer overflows in strto* related routines"
},
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-3515",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "851252"
}
],
"notes": [
{
"category": "description",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: VT100 emulation vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of xen package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of qemu-kvm package as shipped with Red Hat\nEnterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "RHBZ#851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
}
],
"release_date": "2012-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-10-02T17:09:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization 2.2\nenvironments using the disk image provided by this package, refer to: \n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/5/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html\n\nTo upgrade Hypervisors in Red Hat Enterprise Virtualization 3.0\nenvironments using the disk image provided by this package, refer to:\n\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Hypervisor_Deployment_Guide/chap-Deployment_Guide-Upgrading_Red_Hat_Enterprise_Virtualization_Hypervisors.html",
"product_ids": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1325"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-RHEV-Hypervisor:rhev-hypervisor6-0:6.3-20120926.0.el6_3.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qemu: VT100 emulation vulnerability"
}
]
}
rhsa-2012:1233
Vulnerability from csaf_redhat
Published
2012-09-05 16:31
Modified
2024-11-22 05:47
Summary
Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update
Notes
Topic
Updated qemu-kvm-rhev packages that fix one security issue and two bugs are
now available for Red Hat Enterprise Linux 6.
The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev packages form the
user-space component for running virtual machines using KVM.
A flaw was found in the way QEMU handled VT100 terminal escape sequences
when emulating certain character devices. A guest user with privileges to
write to a character device that is emulated on the host using a virtual
console back-end could use this flaw to crash the qemu-kvm process on the
host or, possibly, escalate their privileges on the host. (CVE-2012-3515)
When using qemu-kvm-rhev on a Red Hat Enterprise Linux 6 host not managed
by Red Hat Enterprise Virtualization:
* This flaw did not affect the default use of KVM. Affected configurations
were:
- When guests were started from the command line ("/usr/libexec/qemu-kvm")
without the "-nodefaults" option, and also without specifying a
serial or parallel device, or a virtio-console device, that specifically
does not use a virtual console (vc) back-end. (Note that Red Hat does not
support invoking "qemu-kvm" from the command line without "-nodefaults" on
Red Hat Enterprise Linux 6.)
- Guests that were managed via libvirt, such as when using Virtual Machine
Manager (virt-manager), but that have a serial or parallel device, or a
virtio-console device, that uses a virtual console back-end. By default,
guests managed via libvirt will not use a virtual console back-end for such
devices.
When using qemu-kvm-rhev on a Red Hat Enterprise Virtualization managed Red
Hat Enterprise Linux 6 host:
* This flaw did not affect the default use of a Red Hat Enterprise
Virtualization host: it is not possible to add a device that uses a virtual
console back-end via Red Hat Enterprise Virtualization Manager.
To specify a virtual console back-end for a device and therefore be
vulnerable to this issue, the device would have to be created another way,
for example, by using a VDSM hook.
Red Hat would like to thank the Xen project for reporting this issue.
This update also fixes the following bugs:
* Previously, the KVM modules were not loaded by the postinstall scriptlet
of RPM scripts. This bug caused various issues and required the system to
be rebooted to resolve them. With this update, the modules are loaded
properly by the scriptlet and no unnecessary reboots are now required.
(BZ#839897)
* Previously, when a guest was started up with two serial devices, qemu-kvm
returned an error message and terminated the boot because IRQ 4 for the ISA
bus was being used by both devices. This update fixes the qemu-kvm code,
which allows IRQ 4 to be used by more than one device on the ISA bus, and
the boot now succeeds in the described scenario. (BZ#840054)
All users of qemu-kvm-rhev are advised to upgrade to these updated
packages, which fix these issues. After installing this update, shut down
all running virtual machines. Once all virtual machines have shut down,
start them again for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated qemu-kvm-rhev packages that fix one security issue and two bugs are\nnow available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm-rhev packages form the\nuser-space component for running virtual machines using KVM.\n\nA flaw was found in the way QEMU handled VT100 terminal escape sequences\nwhen emulating certain character devices. A guest user with privileges to\nwrite to a character device that is emulated on the host using a virtual\nconsole back-end could use this flaw to crash the qemu-kvm process on the\nhost or, possibly, escalate their privileges on the host. (CVE-2012-3515)\n\nWhen using qemu-kvm-rhev on a Red Hat Enterprise Linux 6 host not managed\nby Red Hat Enterprise Virtualization:\n\n* This flaw did not affect the default use of KVM. Affected configurations\nwere:\n\n- When guests were started from the command line (\"/usr/libexec/qemu-kvm\")\nwithout the \"-nodefaults\" option, and also without specifying a\nserial or parallel device, or a virtio-console device, that specifically\ndoes not use a virtual console (vc) back-end. (Note that Red Hat does not\nsupport invoking \"qemu-kvm\" from the command line without \"-nodefaults\" on\nRed Hat Enterprise Linux 6.)\n\n- Guests that were managed via libvirt, such as when using Virtual Machine\nManager (virt-manager), but that have a serial or parallel device, or a\nvirtio-console device, that uses a virtual console back-end. By default,\nguests managed via libvirt will not use a virtual console back-end for such\ndevices.\n\nWhen using qemu-kvm-rhev on a Red Hat Enterprise Virtualization managed Red\nHat Enterprise Linux 6 host:\n\n* This flaw did not affect the default use of a Red Hat Enterprise\nVirtualization host: it is not possible to add a device that uses a virtual\nconsole back-end via Red Hat Enterprise Virtualization Manager.\n\nTo specify a virtual console back-end for a device and therefore be\nvulnerable to this issue, the device would have to be created another way,\nfor example, by using a VDSM hook.\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nThis update also fixes the following bugs:\n\n* Previously, the KVM modules were not loaded by the postinstall scriptlet\nof RPM scripts. This bug caused various issues and required the system to\nbe rebooted to resolve them. With this update, the modules are loaded\nproperly by the scriptlet and no unnecessary reboots are now required.\n(BZ#839897)\n\n* Previously, when a guest was started up with two serial devices, qemu-kvm\nreturned an error message and terminated the boot because IRQ 4 for the ISA\nbus was being used by both devices. This update fixes the qemu-kvm code,\nwhich allows IRQ 4 to be used by more than one device on the ISA bus, and\nthe boot now succeeds in the described scenario. (BZ#840054)\n\nAll users of qemu-kvm-rhev are advised to upgrade to these updated\npackages, which fix these issues. After installing this update, shut down\nall running virtual machines. Once all virtual machines have shut down,\nstart them again for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:1233",
"url": "https://access.redhat.com/errata/RHSA-2012:1233"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1233.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update",
"tracking": {
"current_release_date": "2024-11-22T05:47:10+00:00",
"generator": {
"date": "2024-11-22T05:47:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2012:1233",
"initial_release_date": "2012-09-05T16:31:00+00:00",
"revision_history": [
{
"date": "2012-09-05T16:31:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-09-05T16:35:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T05:47:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEV Agents (vdsm)",
"product": {
"name": "RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:6::hypervisor"
}
}
}
],
"category": "product_family",
"name": "Red Hat Virtualization"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"product": {
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"product_id": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.295.el6_3.2?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product": {
"name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_id": "qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-tools@0.12.1.2-2.295.el6_3.2?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src"
},
"product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64 as a component of RHEV Agents (vdsm)",
"product_id": "6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
},
"product_reference": "qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64",
"relates_to_product_reference": "6Server-RHEV-Agents"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-3515",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-08-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "851252"
}
],
"notes": [
{
"category": "description",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qemu: VT100 emulation vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did affect the versions of xen package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of kvm package as shipped with Red Hat\nEnterprise Linux 5.\n\nThis issue did affect the versions of qemu-kvm package as shipped with Red Hat\nEnterprise Linux 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "RHBZ#851252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-3515",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-3515"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
}
],
"release_date": "2012-09-05T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-09-05T16:31:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:1233"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.4,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
"products": [
"6Server-RHEV-Agents:qemu-img-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.src",
"6Server-RHEV-Agents:qemu-kvm-rhev-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-debuginfo-2:0.12.1.2-2.295.el6_3.2.x86_64",
"6Server-RHEV-Agents:qemu-kvm-rhev-tools-2:0.12.1.2-2.295.el6_3.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qemu: VT100 emulation vulnerability"
}
]
}
gsd-2012-3515
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2012-3515",
"description": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"id": "GSD-2012-3515",
"references": [
"https://www.suse.com/security/cve/CVE-2012-3515.html",
"https://www.debian.org/security/2012/dsa-2545",
"https://www.debian.org/security/2012/dsa-2543",
"https://www.debian.org/security/2012/dsa-2542",
"https://access.redhat.com/errata/RHSA-2012:1325",
"https://access.redhat.com/errata/RHSA-2012:1262",
"https://access.redhat.com/errata/RHSA-2012:1236",
"https://access.redhat.com/errata/RHSA-2012:1235",
"https://access.redhat.com/errata/RHSA-2012:1234",
"https://access.redhat.com/errata/RHSA-2012:1233",
"https://linux.oracle.com/cve/CVE-2012-3515.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2012-3515"
],
"details": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"id": "GSD-2012-3515",
"modified": "2023-12-13T01:20:20.347062Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-3515",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"name": "http://secunia.com/advisories/55082",
"refsource": "MISC",
"url": "http://secunia.com/advisories/55082"
},
{
"name": "http://security.gentoo.org/glsa/glsa-201309-24.xml",
"refsource": "MISC",
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "http://secunia.com/advisories/50472",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50472"
},
{
"name": "http://secunia.com/advisories/50530",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50530"
},
{
"name": "http://secunia.com/advisories/51413",
"refsource": "MISC",
"url": "http://secunia.com/advisories/51413"
},
{
"name": "http://support.citrix.com/article/CTX134708",
"refsource": "MISC",
"url": "http://support.citrix.com/article/CTX134708"
},
{
"name": "https://security.gentoo.org/glsa/201604-03",
"refsource": "MISC",
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"name": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log",
"refsource": "MISC",
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"name": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"name": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html",
"refsource": "MISC",
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1233.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1234.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1235.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1236.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1262.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2012-1325.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "http://secunia.com/advisories/50528",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50528"
},
{
"name": "http://secunia.com/advisories/50632",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50632"
},
{
"name": "http://secunia.com/advisories/50689",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50689"
},
{
"name": "http://secunia.com/advisories/50860",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50860"
},
{
"name": "http://secunia.com/advisories/50913",
"refsource": "MISC",
"url": "http://secunia.com/advisories/50913"
},
{
"name": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability",
"refsource": "MISC",
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"name": "http://www.debian.org/security/2012/dsa-2543",
"refsource": "MISC",
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"name": "http://www.debian.org/security/2012/dsa-2545",
"refsource": "MISC",
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"name": "http://www.openwall.com/lists/oss-security/2012/09/05/10",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"name": "http://www.securityfocus.com/bid/55413",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/55413"
},
{
"name": "http://www.ubuntu.com/usn/USN-1590-1",
"refsource": "MISC",
"url": "http://www.ubuntu.com/usn/USN-1590-1"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.2.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:redhat:virtualization:5.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-3515"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\""
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "50530",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50530"
},
{
"name": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"name": "[oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Mitigation",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"name": "50472",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50472"
},
{
"name": "[Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"name": "http://support.citrix.com/article/CTX134708",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "http://support.citrix.com/article/CTX134708"
},
{
"name": "openSUSE-SU-2012:1174",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"name": "openSUSE-SU-2012:1172",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"name": "SUSE-SU-2012:1205",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"name": "SUSE-SU-2012:1203",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"name": "DSA-2545",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"name": "SUSE-SU-2012:1320",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"name": "SUSE-SU-2012:1129",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"name": "openSUSE-SU-2012:1572",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "SUSE-SU-2012:1135",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"name": "SUSE-SU-2012:1133",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"name": "openSUSE-SU-2012:1153",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"name": "SUSE-SU-2012:1202",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"name": "RHSA-2012:1234",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"name": "DSA-2543",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"name": "openSUSE-SU-2012:1170",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"name": "SUSE-SU-2012:1132",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"name": "USN-1590-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-1590-1"
},
{
"name": "SUSE-SU-2012:1162",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"name": "RHSA-2012:1235",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"name": "RHSA-2012:1325",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"name": "RHSA-2012:1233",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"name": "RHSA-2012:1236",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"name": "RHSA-2012:1262",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"name": "55413",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/55413"
},
{
"name": "50860",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50860"
},
{
"name": "50632",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50632"
},
{
"name": "50528",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50528"
},
{
"name": "50689",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50689"
},
{
"name": "50913",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50913"
},
{
"name": "51413",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "GLSA-201309-24",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"name": "55082",
"refsource": "SECUNIA",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/55082"
},
{
"name": "openSUSE-SU-2012:1573",
"refsource": "SUSE",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "GLSA-201604-03",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"name": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log",
"refsource": "MISC",
"tags": [],
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2023-02-13T04:34Z",
"publishedDate": "2012-11-23T20:55Z"
}
}
}
fkie_cve-2012-3515
Vulnerability from fkie_nvd
Published
2012-11-23 20:55
Modified
2025-04-11 00:51
Severity ?
Summary
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert@redhat.com | http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html | Mailing List, Vendor Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1233.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1234.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1235.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1236.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1262.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2012-1325.html | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50472 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50528 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50530 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50632 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50689 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50860 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/50913 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/51413 | Third Party Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/55082 | Third Party Advisory | |
| secalert@redhat.com | http://security.gentoo.org/glsa/glsa-201309-24.xml | Third Party Advisory | |
| secalert@redhat.com | http://support.citrix.com/article/CTX134708 | Third Party Advisory | |
| secalert@redhat.com | http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability | Vendor Advisory | |
| secalert@redhat.com | http://www.debian.org/security/2012/dsa-2543 | Third Party Advisory | |
| secalert@redhat.com | http://www.debian.org/security/2012/dsa-2545 | Third Party Advisory | |
| secalert@redhat.com | http://www.openwall.com/lists/oss-security/2012/09/05/10 | Mailing List, Mitigation, Third Party Advisory | |
| secalert@redhat.com | http://www.securityfocus.com/bid/55413 | Third Party Advisory, VDB Entry | |
| secalert@redhat.com | http://www.ubuntu.com/usn/USN-1590-1 | Third Party Advisory | |
| secalert@redhat.com | https://security.gentoo.org/glsa/201604-03 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html | Mailing List, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1233.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1234.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1235.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1236.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1262.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2012-1325.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50472 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50528 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50530 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50632 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50689 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50860 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/50913 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/51413 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/55082 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://security.gentoo.org/glsa/glsa-201309-24.xml | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://support.citrix.com/article/CTX134708 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2012/dsa-2543 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2012/dsa-2545 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2012/09/05/10 | Mailing List, Mitigation, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/55413 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.ubuntu.com/usn/USN-1590-1 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201604-03 | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| qemu | qemu | * | |
| xen | xen | 4.0.0 | |
| xen | xen | 4.1.0 | |
| opensuse | opensuse | 11.4 | |
| opensuse | opensuse | 12.1 | |
| opensuse | opensuse | 12.2 | |
| suse | linux_enterprise_desktop | 10 | |
| suse | linux_enterprise_desktop | 11 | |
| suse | linux_enterprise_server | 10 | |
| suse | linux_enterprise_server | 10 | |
| suse | linux_enterprise_server | 10 | |
| suse | linux_enterprise_server | 11 | |
| suse | linux_enterprise_server | 11 | |
| suse | linux_enterprise_server | 11 | |
| suse | linux_enterprise_software_development_kit | 10 | |
| suse | linux_enterprise_software_development_kit | 11 | |
| redhat | virtualization | 3.0 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | virtualization | 5.0 | |
| redhat | virtualization | 6.0 | |
| redhat | enterprise_linux_desktop | 5.0 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_eus | 6.3 | |
| redhat | enterprise_linux_server | 5.0 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_workstation | 5.0 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| debian | debian_linux | 6.0 | |
| debian | debian_linux | 7.0 | |
| canonical | ubuntu_linux | 10.04 | |
| canonical | ubuntu_linux | 11.04 | |
| canonical | ubuntu_linux | 11.10 | |
| canonical | ubuntu_linux | 12.04 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
"matchCriteriaId": "03FB8819-CA76-4C31-A901-6ACCB8325928",
"versionEndExcluding": "1.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "550223A9-B9F1-440A-8C25-9F0F76AF7301",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0D532B60-C8DD-4A2F-9D05-E574D23EB754",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*",
"matchCriteriaId": "EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D806A17E-B8F9-466D-807D-3F1E77603DC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:*",
"matchCriteriaId": "F0545634-EC4A-48E8-AB3D-49802FB11758",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*",
"matchCriteriaId": "00720D8C-3FF3-4B1C-B74B-91F01A544399",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:*:*:*:*",
"matchCriteriaId": "22A79A35-05DB-4B9F-AD3E-EA6F933CF10C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*",
"matchCriteriaId": "CED02712-1031-4206-AC4D-E68710F46EC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:*:*:*:*",
"matchCriteriaId": "A53FF936-C785-4CEF-BAD0-3C3EB90EE466",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:ltss:*:*:*",
"matchCriteriaId": "67960FB9-13D1-4DEE-8158-31BF31BCBE6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*",
"matchCriteriaId": "88D6E858-FD8F-4C55-B7D5-CEEDA2BBA898",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*",
"matchCriteriaId": "DB4D6749-81A1-41D7-BF4F-1C45A7F49A22",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*",
"matchCriteriaId": "436EF2ED-FDBB-4B64-8EC4-33C3E4253F06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*",
"matchCriteriaId": "5AA37837-3083-4DC7-94F4-54FD5D7CB53C",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:virtualization:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D86166F9-BBF0-4650-8CCD-0F9C97104D21",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:virtualization:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FCFEF451-4B77-4259-8000-B252E699A950",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:redhat:virtualization:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "37BA55FC-D350-4DEB-9802-40AF59C99E79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "133AAFA7-AF42-4D7B-8822-AA2E85611BF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8382A145-CDD9-437E-9DE7-A349956778B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "54D669D4-6D7E-449D-80C1-28FA44F06FFE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "036E8A89-7A16-411F-9D31-676313BB7244",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "16F59A04-14CF-49E2-9973-645477EA09DA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*",
"matchCriteriaId": "01EDA41C-6B2E-49AF-B503-EB3882265C11",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*",
"matchCriteriaId": "EF49D26F-142E-468B-87C1-BABEA445255C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*",
"matchCriteriaId": "E4174F4F-149E-41A6-BBCC-D01114C05F38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "8D305F7A-D159-4716-AB26-5E38BB5CD991",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\""
},
{
"lang": "es",
"value": "Qemu, tal como se utiliza en Xen v4.0, v4.1 y posiblemente otros productos, al emular ciertos dispositivos con una consola virtual, permite a los usuarios locales del SO invitado obtener privilegios a trav\u00e9s de una secuencia VT100 de escape manipulada que desencadena la sobrescritura del espacio de direcciones de un \"device model\u0027s address space.\""
}
],
"id": "CVE-2012-3515",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-11-23T20:55:03.523",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50472"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50528"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50530"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50632"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50689"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50860"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50913"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/51413"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/55082"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://support.citrix.com/article/CTX134708"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Mitigation",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/55413"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-1590-1"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50472"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50528"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50530"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50632"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50689"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50860"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/50913"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/51413"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://secunia.com/advisories/55082"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://support.citrix.com/article/CTX134708"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Mitigation",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/55413"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.ubuntu.com/usn/USN-1590-1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/201604-03"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
suse-su-2015:0943-1
Vulnerability from csaf_suse
Published
2013-06-24 20:56
Modified
2013-06-24 20:56
Summary
Security update for KVM
Notes
Title of the patch
Security update for KVM
Description of the patch
This update fixes a file permission issue with qga (the QEMU Guest Agent)
from the qemu/kvm package and includes several bug-fixes.
(bnc#818182) (CVE-2013-2007) (bnc#786813) (bnc#725008) (bnc#712137)
(bnc#824340)
Security Issues:
* CVE-2013-2007
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007>
Patchnames
slessp2-kvm
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for KVM",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThis update fixes a file permission issue with qga (the QEMU Guest Agent) \nfrom the qemu/kvm package and includes several bug-fixes.\n\n(bnc#818182) (CVE-2013-2007) (bnc#786813) (bnc#725008) (bnc#712137) \n(bnc#824340)\n\nSecurity Issues:\n\n * CVE-2013-2007\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2007\u003e\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp2-kvm",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0943-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:0943-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150943-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:0943-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001407.html"
},
{
"category": "self",
"summary": "SUSE Bug 709405",
"url": "https://bugzilla.suse.com/709405"
},
{
"category": "self",
"summary": "SUSE Bug 712137",
"url": "https://bugzilla.suse.com/712137"
},
{
"category": "self",
"summary": "SUSE Bug 722643",
"url": "https://bugzilla.suse.com/722643"
},
{
"category": "self",
"summary": "SUSE Bug 722958",
"url": "https://bugzilla.suse.com/722958"
},
{
"category": "self",
"summary": "SUSE Bug 724813",
"url": "https://bugzilla.suse.com/724813"
},
{
"category": "self",
"summary": "SUSE Bug 725008",
"url": "https://bugzilla.suse.com/725008"
},
{
"category": "self",
"summary": "SUSE Bug 747339",
"url": "https://bugzilla.suse.com/747339"
},
{
"category": "self",
"summary": "SUSE Bug 753313",
"url": "https://bugzilla.suse.com/753313"
},
{
"category": "self",
"summary": "SUSE Bug 757031",
"url": "https://bugzilla.suse.com/757031"
},
{
"category": "self",
"summary": "SUSE Bug 764526",
"url": "https://bugzilla.suse.com/764526"
},
{
"category": "self",
"summary": "SUSE Bug 770153",
"url": "https://bugzilla.suse.com/770153"
},
{
"category": "self",
"summary": "SUSE Bug 772586",
"url": "https://bugzilla.suse.com/772586"
},
{
"category": "self",
"summary": "SUSE Bug 777084",
"url": "https://bugzilla.suse.com/777084"
},
{
"category": "self",
"summary": "SUSE Bug 786813",
"url": "https://bugzilla.suse.com/786813"
},
{
"category": "self",
"summary": "SUSE Bug 818182",
"url": "https://bugzilla.suse.com/818182"
},
{
"category": "self",
"summary": "SUSE Bug 824340",
"url": "https://bugzilla.suse.com/824340"
},
{
"category": "self",
"summary": "SUSE Bug 834196",
"url": "https://bugzilla.suse.com/834196"
},
{
"category": "self",
"summary": "SUSE Bug 929339",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2652 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3515 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3456 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3456/"
}
],
"title": "Security update for KVM",
"tracking": {
"current_release_date": "2013-06-24T20:56:39Z",
"generator": {
"date": "2013-06-24T20:56:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:0943-1",
"initial_release_date": "2013-06-24T20:56:39Z",
"revision_history": [
{
"date": "2013-06-24T20:56:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kvm-0.15.1-0.27.1.i586",
"product": {
"name": "kvm-0.15.1-0.27.1.i586",
"product_id": "kvm-0.15.1-0.27.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "kvm-0.15.1-0.27.1.x86_64",
"product": {
"name": "kvm-0.15.1-0.27.1.x86_64",
"product_id": "kvm-0.15.1-0.27.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2",
"product_id": "SUSE Linux Enterprise Server 11 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.i586 as component of SUSE Linux Enterprise Server 11 SP2",
"product_id": "SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586"
},
"product_reference": "kvm-0.15.1-0.27.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2",
"product_id": "SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64"
},
"product_reference": "kvm-0.15.1-0.27.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.i586 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586"
},
"product_reference": "kvm-0.15.1-0.27.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64"
},
"product_reference": "kvm-0.15.1-0.27.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586"
},
"product_reference": "kvm-0.15.1-0.27.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.15.1-0.27.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
},
"product_reference": "kvm-0.15.1-0.27.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2012-2652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2652"
}
],
"notes": [
{
"category": "general",
"text": "The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2652",
"url": "https://www.suse.com/security/cve/CVE-2012-2652"
},
{
"category": "external",
"summary": "SUSE Bug 764526 for CVE-2012-2652",
"url": "https://bugzilla.suse.com/764526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-06-24T20:56:39Z",
"details": "moderate"
}
],
"title": "CVE-2012-2652"
},
{
"cve": "CVE-2012-3515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3515"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3515",
"url": "https://www.suse.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "SUSE Bug 777084 for CVE-2012-3515",
"url": "https://bugzilla.suse.com/777084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-06-24T20:56:39Z",
"details": "important"
}
],
"title": "CVE-2012-3515"
},
{
"cve": "CVE-2013-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2007"
}
],
"notes": [
{
"category": "general",
"text": "The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2007",
"url": "https://www.suse.com/security/cve/CVE-2013-2007"
},
{
"category": "external",
"summary": "SUSE Bug 818181 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818181"
},
{
"category": "external",
"summary": "SUSE Bug 818182 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818182"
},
{
"category": "external",
"summary": "SUSE Bug 818183 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818183"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-06-24T20:56:39Z",
"details": "moderate"
}
],
"title": "CVE-2013-2007"
},
{
"cve": "CVE-2015-3456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3456"
}
],
"notes": [
{
"category": "general",
"text": "The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3456",
"url": "https://www.suse.com/security/cve/CVE-2015-3456"
},
{
"category": "external",
"summary": "SUSE Bug 929339 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "external",
"summary": "SUSE Bug 932770 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "external",
"summary": "SUSE Bug 935900 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/935900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2-LTSS:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server 11 SP2:kvm-0.15.1-0.27.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP2:kvm-0.15.1-0.27.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2013-06-24T20:56:39Z",
"details": "moderate"
}
],
"title": "CVE-2015-3456"
}
]
}
suse-su-2015:0929-1
Vulnerability from csaf_suse
Published
2012-08-31 14:36
Modified
2012-08-31 14:36
Summary
Security update for kvm
Notes
Title of the patch
Security update for kvm
Description of the patch
The kvm qemu vt100 emulation was affected by a problem where specific vt100
sequences could have been used by guest users to affect the host.
(CVE-2012-3515 aka XSA-17).
Also a temp file race was fixed. (CVE-2012-2652)
Security Issue reference:
* CVE-2012-3515
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515>
* CVE-2012-2652
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652>
Patchnames
slessp1-kvm
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for kvm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe kvm qemu vt100 emulation was affected by a problem where specific vt100 \nsequences could have been used by guest users to affect the host. \n(CVE-2012-3515 aka XSA-17).\n\nAlso a temp file race was fixed. (CVE-2012-2652)\n\nSecurity Issue reference:\n\n * CVE-2012-3515\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515\u003e\n * CVE-2012-2652\n \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652\u003e\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "slessp1-kvm",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_0929-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2015:0929-1",
"url": "https://www.suse.com/support/update/announcement/2015/suse-su-20150929-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2015:0929-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2015-May/001402.html"
},
{
"category": "self",
"summary": "SUSE Bug 598271",
"url": "https://bugzilla.suse.com/598271"
},
{
"category": "self",
"summary": "SUSE Bug 598298",
"url": "https://bugzilla.suse.com/598298"
},
{
"category": "self",
"summary": "SUSE Bug 599095",
"url": "https://bugzilla.suse.com/599095"
},
{
"category": "self",
"summary": "SUSE Bug 603161",
"url": "https://bugzilla.suse.com/603161"
},
{
"category": "self",
"summary": "SUSE Bug 603179",
"url": "https://bugzilla.suse.com/603179"
},
{
"category": "self",
"summary": "SUSE Bug 610682",
"url": "https://bugzilla.suse.com/610682"
},
{
"category": "self",
"summary": "SUSE Bug 619991",
"url": "https://bugzilla.suse.com/619991"
},
{
"category": "self",
"summary": "SUSE Bug 621793",
"url": "https://bugzilla.suse.com/621793"
},
{
"category": "self",
"summary": "SUSE Bug 626654",
"url": "https://bugzilla.suse.com/626654"
},
{
"category": "self",
"summary": "SUSE Bug 637297",
"url": "https://bugzilla.suse.com/637297"
},
{
"category": "self",
"summary": "SUSE Bug 689895",
"url": "https://bugzilla.suse.com/689895"
},
{
"category": "self",
"summary": "SUSE Bug 690781",
"url": "https://bugzilla.suse.com/690781"
},
{
"category": "self",
"summary": "SUSE Bug 695510",
"url": "https://bugzilla.suse.com/695510"
},
{
"category": "self",
"summary": "SUSE Bug 695766",
"url": "https://bugzilla.suse.com/695766"
},
{
"category": "self",
"summary": "SUSE Bug 698237",
"url": "https://bugzilla.suse.com/698237"
},
{
"category": "self",
"summary": "SUSE Bug 701161",
"url": "https://bugzilla.suse.com/701161"
},
{
"category": "self",
"summary": "SUSE Bug 702823",
"url": "https://bugzilla.suse.com/702823"
},
{
"category": "self",
"summary": "SUSE Bug 704933",
"url": "https://bugzilla.suse.com/704933"
},
{
"category": "self",
"summary": "SUSE Bug 705095",
"url": "https://bugzilla.suse.com/705095"
},
{
"category": "self",
"summary": "SUSE Bug 705304",
"url": "https://bugzilla.suse.com/705304"
},
{
"category": "self",
"summary": "SUSE Bug 740165",
"url": "https://bugzilla.suse.com/740165"
},
{
"category": "self",
"summary": "SUSE Bug 764526",
"url": "https://bugzilla.suse.com/764526"
},
{
"category": "self",
"summary": "SUSE Bug 777084",
"url": "https://bugzilla.suse.com/777084"
},
{
"category": "self",
"summary": "SUSE Bug 877642",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "self",
"summary": "SUSE Bug 877645",
"url": "https://bugzilla.suse.com/877645"
},
{
"category": "self",
"summary": "SUSE Bug 929339",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "self",
"summary": "SUSE Bug 932770",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1750 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1751 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-2212 page",
"url": "https://www.suse.com/security/cve/CVE-2011-2212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-2512 page",
"url": "https://www.suse.com/security/cve/CVE-2011-2512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-2527 page",
"url": "https://www.suse.com/security/cve/CVE-2011-2527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0029 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2652 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3515 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0222 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0223 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3209 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3456 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3456/"
}
],
"title": "Security update for kvm",
"tracking": {
"current_release_date": "2012-08-31T14:36:20Z",
"generator": {
"date": "2012-08-31T14:36:20Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2015:0929-1",
"initial_release_date": "2012-08-31T14:36:20Z",
"revision_history": [
{
"date": "2012-08-31T14:36:20Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kvm-0.12.5-1.24.1.i586",
"product": {
"name": "kvm-0.12.5-1.24.1.i586",
"product_id": "kvm-0.12.5-1.24.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "kvm-0.12.5-1.24.1.x86_64",
"product": {
"name": "kvm-0.12.5-1.24.1.x86_64",
"product_id": "kvm-0.12.5-1.24.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles_ltss:11:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP1-TERADATA",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP1-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP1-TERADATA",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:11:sp1:teradata"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.12.5-1.24.1.i586 as component of SUSE Linux Enterprise Server 11 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586"
},
"product_reference": "kvm-0.12.5-1.24.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.12.5-1.24.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64"
},
"product_reference": "kvm-0.12.5-1.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.12.5-1.24.1.i586 as component of SUSE Linux Enterprise Server 11 SP1-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586"
},
"product_reference": "kvm-0.12.5-1.24.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP1-TERADATA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kvm-0.12.5-1.24.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP1-TERADATA",
"product_id": "SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
},
"product_reference": "kvm-0.12.5-1.24.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP1-TERADATA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2011-1750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1750"
}
],
"notes": [
{
"category": "general",
"text": "Multiple heap-based buffer overflows in the virtio-blk driver (hw/virtio-blk.c) in qemu-kvm 0.14.0 allow local guest users to cause a denial of service (guest crash) and possibly gain privileges via a (1) write request to the virtio_blk_handle_write function or (2) read request to the virtio_blk_handle_read function that is not properly aligned.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1750",
"url": "https://www.suse.com/security/cve/CVE-2011-1750"
},
{
"category": "external",
"summary": "SUSE Bug 689895 for CVE-2011-1750",
"url": "https://bugzilla.suse.com/689895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2011-1750"
},
{
"cve": "CVE-2011-1751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1751"
}
],
"notes": [
{
"category": "general",
"text": "The pciej_write function in hw/acpi_piix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service (guest crash) and possibly execute arbitrary code by sending a crafted value to the 0xae08 (PCI_EJ_BASE) I/O port, which leads to a use-after-free related to \"active qemu timers.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1751",
"url": "https://www.suse.com/security/cve/CVE-2011-1751"
},
{
"category": "external",
"summary": "SUSE Bug 690781 for CVE-2011-1751",
"url": "https://bugzilla.suse.com/690781"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2011-1751"
},
{
"cve": "CVE-2011-2212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-2212"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service (guest crash) or gain privileges via a crafted indirect descriptor related to \"virtqueue in and out requests.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-2212",
"url": "https://www.suse.com/security/cve/CVE-2011-2212"
},
{
"category": "external",
"summary": "SUSE Bug 701161 for CVE-2011-2212",
"url": "https://bugzilla.suse.com/701161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2011-2212"
},
{
"cve": "CVE-2011-2512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-2512"
}
],
"notes": [
{
"category": "general",
"text": "The virtio_queue_notify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service (guest crash) and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed comparison.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-2512",
"url": "https://www.suse.com/security/cve/CVE-2011-2512"
},
{
"category": "external",
"summary": "SUSE Bug 702823 for CVE-2011-2512",
"url": "https://bugzilla.suse.com/702823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "moderate"
}
],
"title": "CVE-2011-2512"
},
{
"cve": "CVE-2011-2527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-2527"
}
],
"notes": [
{
"category": "general",
"text": "The change_process_uid function in os-posix.c in Qemu 0.14.0 and earlier does not properly drop group privileges when the -runas option is used, which allows local guest users to access restricted files on the host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-2527",
"url": "https://www.suse.com/security/cve/CVE-2011-2527"
},
{
"category": "external",
"summary": "SUSE Bug 705304 for CVE-2011-2527",
"url": "https://bugzilla.suse.com/705304"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "low"
}
],
"title": "CVE-2011-2527"
},
{
"cve": "CVE-2012-0029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0029"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0029",
"url": "https://www.suse.com/security/cve/CVE-2012-0029"
},
{
"category": "external",
"summary": "SUSE Bug 740165 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/740165"
},
{
"category": "external",
"summary": "SUSE Bug 747331 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/747331"
},
{
"category": "external",
"summary": "SUSE Bug 757537 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/757537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2012-0029"
},
{
"cve": "CVE-2012-2652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2652"
}
],
"notes": [
{
"category": "general",
"text": "The bdrv_open function in Qemu 1.0 does not properly handle the failure of the mkstemp function, when in snapshot node, which allows local users to overwrite or read arbitrary files via a symlink attack on an unspecified temporary file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2652",
"url": "https://www.suse.com/security/cve/CVE-2012-2652"
},
{
"category": "external",
"summary": "SUSE Bug 764526 for CVE-2012-2652",
"url": "https://bugzilla.suse.com/764526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "moderate"
}
],
"title": "CVE-2012-2652"
},
{
"cve": "CVE-2012-3515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3515"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3515",
"url": "https://www.suse.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "SUSE Bug 777084 for CVE-2012-3515",
"url": "https://bugzilla.suse.com/777084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2012-3515"
},
{
"cve": "CVE-2014-0222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0222"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0222",
"url": "https://www.suse.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 877642 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/950367"
},
{
"category": "external",
"summary": "SUSE Bug 964925 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/964925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "moderate"
}
],
"title": "CVE-2014-0222"
},
{
"cve": "CVE-2014-0223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0223"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a large image size, which triggers a buffer overflow or out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0223",
"url": "https://www.suse.com/security/cve/CVE-2014-0223"
},
{
"category": "external",
"summary": "SUSE Bug 877645 for CVE-2014-0223",
"url": "https://bugzilla.suse.com/877645"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "moderate"
}
],
"title": "CVE-2014-0223"
},
{
"cve": "CVE-2015-3209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3209"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3209",
"url": "https://www.suse.com/security/cve/CVE-2015-3209"
},
{
"category": "external",
"summary": "SUSE Bug 932267 for CVE-2015-3209",
"url": "https://bugzilla.suse.com/932267"
},
{
"category": "external",
"summary": "SUSE Bug 932770 for CVE-2015-3209",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "external",
"summary": "SUSE Bug 932823 for CVE-2015-3209",
"url": "https://bugzilla.suse.com/932823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "important"
}
],
"title": "CVE-2015-3209"
},
{
"cve": "CVE-2015-3456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3456"
}
],
"notes": [
{
"category": "general",
"text": "The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3456",
"url": "https://www.suse.com/security/cve/CVE-2015-3456"
},
{
"category": "external",
"summary": "SUSE Bug 929339 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "external",
"summary": "SUSE Bug 932770 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "external",
"summary": "SUSE Bug 935900 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/935900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-LTSS:kvm-0.12.5-1.24.1.x86_64",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.i586",
"SUSE Linux Enterprise Server 11 SP1-TERADATA:kvm-0.12.5-1.24.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2012-08-31T14:36:20Z",
"details": "moderate"
}
],
"title": "CVE-2015-3456"
}
]
}
opensuse-su-2024:10285-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
qemu-linux-user-2.6.1-1.5 on GA media
Notes
Title of the patch
qemu-linux-user-2.6.1-1.5 on GA media
Description of the patch
These are all security issues fixed in the qemu-linux-user-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10285
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "qemu-linux-user-2.6.1-1.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the qemu-linux-user-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10285",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10285-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0928 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1945 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2382 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3515 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4020 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4441 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4952 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4964 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4964/"
}
],
"title": "qemu-linux-user-2.6.1-1.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10285-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-linux-user-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-linux-user-2.6.1-1.5.aarch64",
"product_id": "qemu-linux-user-2.6.1-1.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-linux-user-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-linux-user-2.6.1-1.5.ppc64le",
"product_id": "qemu-linux-user-2.6.1-1.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-linux-user-2.6.1-1.5.s390x",
"product": {
"name": "qemu-linux-user-2.6.1-1.5.s390x",
"product_id": "qemu-linux-user-2.6.1-1.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-linux-user-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-linux-user-2.6.1-1.5.x86_64",
"product_id": "qemu-linux-user-2.6.1-1.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-linux-user-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-linux-user-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-linux-user-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-linux-user-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-linux-user-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x"
},
"product_reference": "qemu-linux-user-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-linux-user-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-linux-user-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-0928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0928"
}
],
"notes": [
{
"category": "general",
"text": "Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0928",
"url": "https://www.suse.com/security/cve/CVE-2008-0928"
},
{
"category": "external",
"summary": "SUSE Bug 362956 for CVE-2008-0928",
"url": "https://bugzilla.suse.com/362956"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-0928"
},
{
"cve": "CVE-2008-1945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1945"
}
],
"notes": [
{
"category": "general",
"text": "QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1945",
"url": "https://www.suse.com/security/cve/CVE-2008-1945"
},
{
"category": "external",
"summary": "SUSE Bug 362956 for CVE-2008-1945",
"url": "https://bugzilla.suse.com/362956"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2008-1945"
},
{
"cve": "CVE-2008-2382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2382"
}
],
"notes": [
{
"category": "general",
"text": "The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2382",
"url": "https://www.suse.com/security/cve/CVE-2008-2382"
},
{
"category": "external",
"summary": "SUSE Bug 461565 for CVE-2008-2382",
"url": "https://bugzilla.suse.com/461565"
},
{
"category": "external",
"summary": "SUSE Bug 464142 for CVE-2008-2382",
"url": "https://bugzilla.suse.com/464142"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-2382"
},
{
"cve": "CVE-2008-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4539"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX \"bitblt\" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4539",
"url": "https://www.suse.com/security/cve/CVE-2008-4539"
},
{
"category": "external",
"summary": "SUSE Bug 435135 for CVE-2008-4539",
"url": "https://bugzilla.suse.com/435135"
},
{
"category": "external",
"summary": "SUSE Bug 448551 for CVE-2008-4539",
"url": "https://bugzilla.suse.com/448551"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-4539"
},
{
"cve": "CVE-2012-3515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3515"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3515",
"url": "https://www.suse.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "SUSE Bug 777084 for CVE-2012-3515",
"url": "https://bugzilla.suse.com/777084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-3515"
},
{
"cve": "CVE-2016-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3712"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3712",
"url": "https://www.suse.com/security/cve/CVE-2016-3712"
},
{
"category": "external",
"summary": "SUSE Bug 978160 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-3712"
},
{
"cve": "CVE-2016-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4002"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4002",
"url": "https://www.suse.com/security/cve/CVE-2016-4002"
},
{
"category": "external",
"summary": "SUSE Bug 975136 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "external",
"summary": "SUSE Bug 975138 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4002"
},
{
"cve": "CVE-2016-4020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4020"
}
],
"notes": [
{
"category": "general",
"text": "The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4020",
"url": "https://www.suse.com/security/cve/CVE-2016-4020"
},
{
"category": "external",
"summary": "SUSE Bug 975700 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "external",
"summary": "SUSE Bug 975907 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4020"
},
{
"cve": "CVE-2016-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4439"
}
],
"notes": [
{
"category": "general",
"text": "The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4439",
"url": "https://www.suse.com/security/cve/CVE-2016-4439"
},
{
"category": "external",
"summary": "SUSE Bug 980711 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "external",
"summary": "SUSE Bug 980716 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4439"
},
{
"cve": "CVE-2016-4441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4441"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4441",
"url": "https://www.suse.com/security/cve/CVE-2016-4441"
},
{
"category": "external",
"summary": "SUSE Bug 980723 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "external",
"summary": "SUSE Bug 980724 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4441"
},
{
"cve": "CVE-2016-4952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4952"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4952",
"url": "https://www.suse.com/security/cve/CVE-2016-4952"
},
{
"category": "external",
"summary": "SUSE Bug 981266 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "external",
"summary": "SUSE Bug 981276 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4952"
},
{
"cve": "CVE-2016-4964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4964"
}
],
"notes": [
{
"category": "general",
"text": "The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s-\u003estate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4964",
"url": "https://www.suse.com/security/cve/CVE-2016-4964"
},
{
"category": "external",
"summary": "SUSE Bug 981399 for CVE-2016-4964",
"url": "https://bugzilla.suse.com/981399"
},
{
"category": "external",
"summary": "SUSE Bug 981401 for CVE-2016-4964",
"url": "https://bugzilla.suse.com/981401"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-linux-user-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4964"
}
]
}
opensuse-su-2024:10233-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
qemu-2.6.1-1.5 on GA media
Notes
Title of the patch
qemu-2.6.1-1.5 on GA media
Description of the patch
These are all security issues fixed in the qemu-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10233
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "qemu-2.6.1-1.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the qemu-2.6.1-1.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10233",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10233-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-0928 page",
"url": "https://www.suse.com/security/cve/CVE-2008-0928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-1945 page",
"url": "https://www.suse.com/security/cve/CVE-2008-1945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-2382 page",
"url": "https://www.suse.com/security/cve/CVE-2008-2382/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2008-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2008-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3515 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4148 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4149 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4150 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4151 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4526 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4526/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4527 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4529 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4530 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4531 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4533 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4534 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4535 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4536 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4540 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4541 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4542 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4544 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-6399 page",
"url": "https://www.suse.com/security/cve/CVE-2013-6399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0142 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0143 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0144 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0145 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0146 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0147 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0150 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0182 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3456 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4020 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4441 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4453 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4454 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4454/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4952 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4964 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5105 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5106 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5107 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5107/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5126 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5238 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5337 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5337/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5338 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5403 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6351 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6351/"
}
],
"title": "qemu-2.6.1-1.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10233-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-2.6.1-1.5.aarch64",
"product_id": "qemu-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-arm-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-arm-2.6.1-1.5.aarch64",
"product_id": "qemu-arm-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-block-curl-2.6.1-1.5.aarch64",
"product_id": "qemu-block-curl-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-block-dmg-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-block-dmg-2.6.1-1.5.aarch64",
"product_id": "qemu-block-dmg-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-block-gluster-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-block-gluster-2.6.1-1.5.aarch64",
"product_id": "qemu-block-gluster-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-block-iscsi-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-block-iscsi-2.6.1-1.5.aarch64",
"product_id": "qemu-block-iscsi-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-block-ssh-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-block-ssh-2.6.1-1.5.aarch64",
"product_id": "qemu-block-ssh-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-extra-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-extra-2.6.1-1.5.aarch64",
"product_id": "qemu-extra-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-guest-agent-2.6.1-1.5.aarch64",
"product_id": "qemu-guest-agent-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-1.5.aarch64",
"product": {
"name": "qemu-ipxe-1.0.0-1.5.aarch64",
"product_id": "qemu-ipxe-1.0.0-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-ksm-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-ksm-2.6.1-1.5.aarch64",
"product_id": "qemu-ksm-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-kvm-2.6.1-1.5.aarch64",
"product_id": "qemu-kvm-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-lang-2.6.1-1.5.aarch64",
"product_id": "qemu-lang-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-ppc-2.6.1-1.5.aarch64",
"product_id": "qemu-ppc-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-s390-2.6.1-1.5.aarch64",
"product_id": "qemu-s390-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.9.1-1.5.aarch64",
"product": {
"name": "qemu-seabios-1.9.1-1.5.aarch64",
"product_id": "qemu-seabios-1.9.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-1.5.aarch64",
"product": {
"name": "qemu-sgabios-8-1.5.aarch64",
"product_id": "qemu-sgabios-8-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-testsuite-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-testsuite-2.6.1-1.5.aarch64",
"product_id": "qemu-testsuite-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-tools-2.6.1-1.5.aarch64",
"product_id": "qemu-tools-2.6.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.9.1-1.5.aarch64",
"product": {
"name": "qemu-vgabios-1.9.1-1.5.aarch64",
"product_id": "qemu-vgabios-1.9.1-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.6.1-1.5.aarch64",
"product": {
"name": "qemu-x86-2.6.1-1.5.aarch64",
"product_id": "qemu-x86-2.6.1-1.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-2.6.1-1.5.ppc64le",
"product_id": "qemu-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-arm-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-arm-2.6.1-1.5.ppc64le",
"product_id": "qemu-arm-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-block-curl-2.6.1-1.5.ppc64le",
"product_id": "qemu-block-curl-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-dmg-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-block-dmg-2.6.1-1.5.ppc64le",
"product_id": "qemu-block-dmg-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-gluster-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-block-gluster-2.6.1-1.5.ppc64le",
"product_id": "qemu-block-gluster-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-iscsi-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-block-iscsi-2.6.1-1.5.ppc64le",
"product_id": "qemu-block-iscsi-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-ssh-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-block-ssh-2.6.1-1.5.ppc64le",
"product_id": "qemu-block-ssh-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-extra-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-extra-2.6.1-1.5.ppc64le",
"product_id": "qemu-extra-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-guest-agent-2.6.1-1.5.ppc64le",
"product_id": "qemu-guest-agent-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-1.5.ppc64le",
"product": {
"name": "qemu-ipxe-1.0.0-1.5.ppc64le",
"product_id": "qemu-ipxe-1.0.0-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-ksm-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-ksm-2.6.1-1.5.ppc64le",
"product_id": "qemu-ksm-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-kvm-2.6.1-1.5.ppc64le",
"product_id": "qemu-kvm-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-lang-2.6.1-1.5.ppc64le",
"product_id": "qemu-lang-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-ppc-2.6.1-1.5.ppc64le",
"product_id": "qemu-ppc-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-s390-2.6.1-1.5.ppc64le",
"product_id": "qemu-s390-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.9.1-1.5.ppc64le",
"product": {
"name": "qemu-seabios-1.9.1-1.5.ppc64le",
"product_id": "qemu-seabios-1.9.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-1.5.ppc64le",
"product": {
"name": "qemu-sgabios-8-1.5.ppc64le",
"product_id": "qemu-sgabios-8-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-testsuite-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-testsuite-2.6.1-1.5.ppc64le",
"product_id": "qemu-testsuite-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-tools-2.6.1-1.5.ppc64le",
"product_id": "qemu-tools-2.6.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.9.1-1.5.ppc64le",
"product": {
"name": "qemu-vgabios-1.9.1-1.5.ppc64le",
"product_id": "qemu-vgabios-1.9.1-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.6.1-1.5.ppc64le",
"product": {
"name": "qemu-x86-2.6.1-1.5.ppc64le",
"product_id": "qemu-x86-2.6.1-1.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.6.1-1.5.s390x",
"product": {
"name": "qemu-2.6.1-1.5.s390x",
"product_id": "qemu-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-arm-2.6.1-1.5.s390x",
"product": {
"name": "qemu-arm-2.6.1-1.5.s390x",
"product_id": "qemu-arm-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.6.1-1.5.s390x",
"product": {
"name": "qemu-block-curl-2.6.1-1.5.s390x",
"product_id": "qemu-block-curl-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-dmg-2.6.1-1.5.s390x",
"product": {
"name": "qemu-block-dmg-2.6.1-1.5.s390x",
"product_id": "qemu-block-dmg-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-gluster-2.6.1-1.5.s390x",
"product": {
"name": "qemu-block-gluster-2.6.1-1.5.s390x",
"product_id": "qemu-block-gluster-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-iscsi-2.6.1-1.5.s390x",
"product": {
"name": "qemu-block-iscsi-2.6.1-1.5.s390x",
"product_id": "qemu-block-iscsi-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-ssh-2.6.1-1.5.s390x",
"product": {
"name": "qemu-block-ssh-2.6.1-1.5.s390x",
"product_id": "qemu-block-ssh-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-extra-2.6.1-1.5.s390x",
"product": {
"name": "qemu-extra-2.6.1-1.5.s390x",
"product_id": "qemu-extra-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.6.1-1.5.s390x",
"product": {
"name": "qemu-guest-agent-2.6.1-1.5.s390x",
"product_id": "qemu-guest-agent-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-1.5.s390x",
"product": {
"name": "qemu-ipxe-1.0.0-1.5.s390x",
"product_id": "qemu-ipxe-1.0.0-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-ksm-2.6.1-1.5.s390x",
"product": {
"name": "qemu-ksm-2.6.1-1.5.s390x",
"product_id": "qemu-ksm-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.6.1-1.5.s390x",
"product": {
"name": "qemu-kvm-2.6.1-1.5.s390x",
"product_id": "qemu-kvm-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.6.1-1.5.s390x",
"product": {
"name": "qemu-lang-2.6.1-1.5.s390x",
"product_id": "qemu-lang-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.6.1-1.5.s390x",
"product": {
"name": "qemu-ppc-2.6.1-1.5.s390x",
"product_id": "qemu-ppc-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.6.1-1.5.s390x",
"product": {
"name": "qemu-s390-2.6.1-1.5.s390x",
"product_id": "qemu-s390-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.9.1-1.5.s390x",
"product": {
"name": "qemu-seabios-1.9.1-1.5.s390x",
"product_id": "qemu-seabios-1.9.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-1.5.s390x",
"product": {
"name": "qemu-sgabios-8-1.5.s390x",
"product_id": "qemu-sgabios-8-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-testsuite-2.6.1-1.5.s390x",
"product": {
"name": "qemu-testsuite-2.6.1-1.5.s390x",
"product_id": "qemu-testsuite-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.6.1-1.5.s390x",
"product": {
"name": "qemu-tools-2.6.1-1.5.s390x",
"product_id": "qemu-tools-2.6.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.9.1-1.5.s390x",
"product": {
"name": "qemu-vgabios-1.9.1-1.5.s390x",
"product_id": "qemu-vgabios-1.9.1-1.5.s390x"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.6.1-1.5.s390x",
"product": {
"name": "qemu-x86-2.6.1-1.5.s390x",
"product_id": "qemu-x86-2.6.1-1.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-2.6.1-1.5.x86_64",
"product_id": "qemu-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-arm-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-arm-2.6.1-1.5.x86_64",
"product_id": "qemu-arm-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-block-curl-2.6.1-1.5.x86_64",
"product_id": "qemu-block-curl-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-dmg-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-block-dmg-2.6.1-1.5.x86_64",
"product_id": "qemu-block-dmg-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-gluster-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-block-gluster-2.6.1-1.5.x86_64",
"product_id": "qemu-block-gluster-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-iscsi-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-block-iscsi-2.6.1-1.5.x86_64",
"product_id": "qemu-block-iscsi-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-ssh-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-block-ssh-2.6.1-1.5.x86_64",
"product_id": "qemu-block-ssh-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-extra-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-extra-2.6.1-1.5.x86_64",
"product_id": "qemu-extra-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-guest-agent-2.6.1-1.5.x86_64",
"product_id": "qemu-guest-agent-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-1.5.x86_64",
"product": {
"name": "qemu-ipxe-1.0.0-1.5.x86_64",
"product_id": "qemu-ipxe-1.0.0-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ksm-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-ksm-2.6.1-1.5.x86_64",
"product_id": "qemu-ksm-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-kvm-2.6.1-1.5.x86_64",
"product_id": "qemu-kvm-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-lang-2.6.1-1.5.x86_64",
"product_id": "qemu-lang-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-ppc-2.6.1-1.5.x86_64",
"product_id": "qemu-ppc-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-s390-2.6.1-1.5.x86_64",
"product_id": "qemu-s390-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.9.1-1.5.x86_64",
"product": {
"name": "qemu-seabios-1.9.1-1.5.x86_64",
"product_id": "qemu-seabios-1.9.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-1.5.x86_64",
"product": {
"name": "qemu-sgabios-8-1.5.x86_64",
"product_id": "qemu-sgabios-8-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-testsuite-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-testsuite-2.6.1-1.5.x86_64",
"product_id": "qemu-testsuite-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-tools-2.6.1-1.5.x86_64",
"product_id": "qemu-tools-2.6.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.9.1-1.5.x86_64",
"product": {
"name": "qemu-vgabios-1.9.1-1.5.x86_64",
"product_id": "qemu-vgabios-1.9.1-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.6.1-1.5.x86_64",
"product": {
"name": "qemu-x86-2.6.1-1.5.x86_64",
"product_id": "qemu-x86-2.6.1-1.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x"
},
"product_reference": "qemu-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-arm-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-arm-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-arm-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-arm-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-arm-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x"
},
"product_reference": "qemu-arm-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-arm-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-arm-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-block-curl-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-block-curl-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x"
},
"product_reference": "qemu-block-curl-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-block-curl-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-dmg-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-block-dmg-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-dmg-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-block-dmg-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-dmg-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x"
},
"product_reference": "qemu-block-dmg-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-dmg-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-block-dmg-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-gluster-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-block-gluster-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-gluster-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-block-gluster-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-gluster-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x"
},
"product_reference": "qemu-block-gluster-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-gluster-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-block-gluster-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-iscsi-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-block-iscsi-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-iscsi-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-block-iscsi-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-iscsi-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x"
},
"product_reference": "qemu-block-iscsi-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-iscsi-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-block-iscsi-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-ssh-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-block-ssh-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-ssh-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-block-ssh-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-ssh-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x"
},
"product_reference": "qemu-block-ssh-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-ssh-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-block-ssh-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-extra-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-extra-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-extra-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-extra-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-extra-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x"
},
"product_reference": "qemu-extra-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-extra-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-extra-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-guest-agent-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-guest-agent-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x"
},
"product_reference": "qemu-guest-agent-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-guest-agent-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64"
},
"product_reference": "qemu-ipxe-1.0.0-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le"
},
"product_reference": "qemu-ipxe-1.0.0-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x"
},
"product_reference": "qemu-ipxe-1.0.0-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64"
},
"product_reference": "qemu-ipxe-1.0.0-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ksm-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-ksm-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ksm-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-ksm-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ksm-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x"
},
"product_reference": "qemu-ksm-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ksm-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-ksm-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-kvm-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-kvm-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x"
},
"product_reference": "qemu-kvm-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-kvm-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-lang-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-lang-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x"
},
"product_reference": "qemu-lang-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-lang-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-ppc-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-ppc-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x"
},
"product_reference": "qemu-ppc-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-ppc-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-s390-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-s390-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x"
},
"product_reference": "qemu-s390-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-s390-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.9.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64"
},
"product_reference": "qemu-seabios-1.9.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.9.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le"
},
"product_reference": "qemu-seabios-1.9.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.9.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x"
},
"product_reference": "qemu-seabios-1.9.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.9.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64"
},
"product_reference": "qemu-seabios-1.9.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64"
},
"product_reference": "qemu-sgabios-8-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le"
},
"product_reference": "qemu-sgabios-8-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x"
},
"product_reference": "qemu-sgabios-8-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64"
},
"product_reference": "qemu-sgabios-8-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-testsuite-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-testsuite-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-testsuite-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-testsuite-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-testsuite-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x"
},
"product_reference": "qemu-testsuite-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-testsuite-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-testsuite-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-tools-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-tools-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x"
},
"product_reference": "qemu-tools-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-tools-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.9.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64"
},
"product_reference": "qemu-vgabios-1.9.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.9.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le"
},
"product_reference": "qemu-vgabios-1.9.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.9.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x"
},
"product_reference": "qemu-vgabios-1.9.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.9.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64"
},
"product_reference": "qemu-vgabios-1.9.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.6.1-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64"
},
"product_reference": "qemu-x86-2.6.1-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.6.1-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le"
},
"product_reference": "qemu-x86-2.6.1-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.6.1-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x"
},
"product_reference": "qemu-x86-2.6.1-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.6.1-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
},
"product_reference": "qemu-x86-2.6.1-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2008-0928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-0928"
}
],
"notes": [
{
"category": "general",
"text": "Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges to access arbitrary memory and escape the virtual machine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-0928",
"url": "https://www.suse.com/security/cve/CVE-2008-0928"
},
{
"category": "external",
"summary": "SUSE Bug 362956 for CVE-2008-0928",
"url": "https://bugzilla.suse.com/362956"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-0928"
},
{
"cve": "CVE-2008-1945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-1945"
}
],
"notes": [
{
"category": "general",
"text": "QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-1945",
"url": "https://www.suse.com/security/cve/CVE-2008-1945"
},
{
"category": "external",
"summary": "SUSE Bug 362956 for CVE-2008-1945",
"url": "https://bugzilla.suse.com/362956"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2008-1945"
},
{
"cve": "CVE-2008-2382",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-2382"
}
],
"notes": [
{
"category": "general",
"text": "The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-2382",
"url": "https://www.suse.com/security/cve/CVE-2008-2382"
},
{
"category": "external",
"summary": "SUSE Bug 461565 for CVE-2008-2382",
"url": "https://bugzilla.suse.com/461565"
},
{
"category": "external",
"summary": "SUSE Bug 464142 for CVE-2008-2382",
"url": "https://bugzilla.suse.com/464142"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2008-2382"
},
{
"cve": "CVE-2008-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2008-4539"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux and Ubuntu might allow local users to gain privileges by using the VNC console for a connection, aka the LGD-54XX \"bitblt\" heap overflow. NOTE: this issue exists because of an incorrect fix for CVE-2007-1320.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2008-4539",
"url": "https://www.suse.com/security/cve/CVE-2008-4539"
},
{
"category": "external",
"summary": "SUSE Bug 435135 for CVE-2008-4539",
"url": "https://bugzilla.suse.com/435135"
},
{
"category": "external",
"summary": "SUSE Bug 448551 for CVE-2008-4539",
"url": "https://bugzilla.suse.com/448551"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2008-4539"
},
{
"cve": "CVE-2012-3515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3515"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3515",
"url": "https://www.suse.com/security/cve/CVE-2012-3515"
},
{
"category": "external",
"summary": "SUSE Bug 777084 for CVE-2012-3515",
"url": "https://bugzilla.suse.com/777084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-3515"
},
{
"cve": "CVE-2013-4148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4148"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4148",
"url": "https://www.suse.com/security/cve/CVE-2013-4148"
},
{
"category": "external",
"summary": "SUSE Bug 864812 for CVE-2013-4148",
"url": "https://bugzilla.suse.com/864812"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4148",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964630 for CVE-2013-4148",
"url": "https://bugzilla.suse.com/964630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4148"
},
{
"cve": "CVE-2013-4149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4149"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4149",
"url": "https://www.suse.com/security/cve/CVE-2013-4149"
},
{
"category": "external",
"summary": "SUSE Bug 864649 for CVE-2013-4149",
"url": "https://bugzilla.suse.com/864649"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4149",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964443 for CVE-2013-4149",
"url": "https://bugzilla.suse.com/964443"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4149"
},
{
"cve": "CVE-2013-4150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4150"
}
],
"notes": [
{
"category": "general",
"text": "The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4150",
"url": "https://www.suse.com/security/cve/CVE-2013-4150"
},
{
"category": "external",
"summary": "SUSE Bug 864650 for CVE-2013-4150",
"url": "https://bugzilla.suse.com/864650"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4150",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4150"
},
{
"cve": "CVE-2013-4151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4151"
}
],
"notes": [
{
"category": "general",
"text": "The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4151",
"url": "https://www.suse.com/security/cve/CVE-2013-4151"
},
{
"category": "external",
"summary": "SUSE Bug 864653 for CVE-2013-4151",
"url": "https://bugzilla.suse.com/864653"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4151",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964636 for CVE-2013-4151",
"url": "https://bugzilla.suse.com/964636"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4151"
},
{
"cve": "CVE-2013-4526",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4526"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4526",
"url": "https://www.suse.com/security/cve/CVE-2013-4526"
},
{
"category": "external",
"summary": "SUSE Bug 864671 for CVE-2013-4526",
"url": "https://bugzilla.suse.com/864671"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4526",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4526"
},
{
"cve": "CVE-2013-4527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4527"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4527",
"url": "https://www.suse.com/security/cve/CVE-2013-4527"
},
{
"category": "external",
"summary": "SUSE Bug 864673 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/864673"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964746 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/964746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4527"
},
{
"cve": "CVE-2013-4529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4529"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4529",
"url": "https://www.suse.com/security/cve/CVE-2013-4529"
},
{
"category": "external",
"summary": "SUSE Bug 864678 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/864678"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964929 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/964929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4529"
},
{
"cve": "CVE-2013-4530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4530"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4530",
"url": "https://www.suse.com/security/cve/CVE-2013-4530"
},
{
"category": "external",
"summary": "SUSE Bug 1072198 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072198"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1072228 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072228"
},
{
"category": "external",
"summary": "SUSE Bug 864682 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/864682"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964950 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/964950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4530"
},
{
"cve": "CVE-2013-4531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4531"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative value in cpreg_vmstate_array_len in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4531",
"url": "https://www.suse.com/security/cve/CVE-2013-4531"
},
{
"category": "external",
"summary": "SUSE Bug 864796 for CVE-2013-4531",
"url": "https://bugzilla.suse.com/864796"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4531",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4531"
},
{
"cve": "CVE-2013-4533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4533"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4533",
"url": "https://www.suse.com/security/cve/CVE-2013-4533"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864655 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964644 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/964644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4533"
},
{
"cve": "CVE-2013-4534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4534"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4534",
"url": "https://www.suse.com/security/cve/CVE-2013-4534"
},
{
"category": "external",
"summary": "SUSE Bug 864811 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964452 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/964452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4534"
},
{
"cve": "CVE-2013-4535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4535"
}
],
"notes": [
{
"category": "general",
"text": "The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4535",
"url": "https://www.suse.com/security/cve/CVE-2013-4535"
},
{
"category": "external",
"summary": "SUSE Bug 864665 for CVE-2013-4535",
"url": "https://bugzilla.suse.com/864665"
},
{
"category": "external",
"summary": "SUSE Bug 964676 for CVE-2013-4535",
"url": "https://bugzilla.suse.com/964676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4535"
},
{
"cve": "CVE-2013-4536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4536"
}
],
"notes": [
{
"category": "general",
"text": "An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4536",
"url": "https://www.suse.com/security/cve/CVE-2013-4536"
},
{
"category": "external",
"summary": "SUSE Bug 864665 for CVE-2013-4536",
"url": "https://bugzilla.suse.com/864665"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4536",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964676 for CVE-2013-4536",
"url": "https://bugzilla.suse.com/964676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4536"
},
{
"cve": "CVE-2013-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4537"
}
],
"notes": [
{
"category": "general",
"text": "The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4537",
"url": "https://www.suse.com/security/cve/CVE-2013-4537"
},
{
"category": "external",
"summary": "SUSE Bug 864391 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962642 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/962642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4537"
},
{
"cve": "CVE-2013-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4538",
"url": "https://www.suse.com/security/cve/CVE-2013-4538"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864769 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962335 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/962335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4538"
},
{
"cve": "CVE-2013-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4539"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4539",
"url": "https://www.suse.com/security/cve/CVE-2013-4539"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864805 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962758 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/962758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4539"
},
{
"cve": "CVE-2013-4540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4540"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4540",
"url": "https://www.suse.com/security/cve/CVE-2013-4540"
},
{
"category": "external",
"summary": "SUSE Bug 864801 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/864801"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/880751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4540"
},
{
"cve": "CVE-2013-4541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4541"
}
],
"notes": [
{
"category": "general",
"text": "The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_index value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4541",
"url": "https://www.suse.com/security/cve/CVE-2013-4541"
},
{
"category": "external",
"summary": "SUSE Bug 864802 for CVE-2013-4541",
"url": "https://bugzilla.suse.com/864802"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4541",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4541"
},
{
"cve": "CVE-2013-4542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4542"
}
],
"notes": [
{
"category": "general",
"text": "The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds array access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4542",
"url": "https://www.suse.com/security/cve/CVE-2013-4542"
},
{
"category": "external",
"summary": "SUSE Bug 864804 for CVE-2013-4542",
"url": "https://bugzilla.suse.com/864804"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4542",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4542"
},
{
"cve": "CVE-2013-4544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4544"
}
],
"notes": [
{
"category": "general",
"text": "hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers or (3) interrupt indices. NOTE: some of these details are obtained from third party information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4544",
"url": "https://www.suse.com/security/cve/CVE-2013-4544"
},
{
"category": "external",
"summary": "SUSE Bug 873613 for CVE-2013-4544",
"url": "https://bugzilla.suse.com/873613"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4544"
},
{
"cve": "CVE-2013-6399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-6399"
}
],
"notes": [
{
"category": "general",
"text": "Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-6399",
"url": "https://www.suse.com/security/cve/CVE-2013-6399"
},
{
"category": "external",
"summary": "SUSE Bug 864814 for CVE-2013-6399",
"url": "https://bugzilla.suse.com/864814"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-6399",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964643 for CVE-2013-6399",
"url": "https://bugzilla.suse.com/964643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-6399"
},
{
"cve": "CVE-2014-0142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0142"
}
],
"notes": [
{
"category": "general",
"text": "QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallels.c or (2) extent_size field in the bochs function in block/bochs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0142",
"url": "https://www.suse.com/security/cve/CVE-2014-0142"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0142",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0142",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0142"
},
{
"cve": "CVE-2014-0143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0143"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in block/parallels.c or (2) bochs_open function in bochs.c, a large L1 table in the (3) qcow2_snapshot_load_tmp in qcow2-snapshot.c or (4) qcow2_grow_l1_table function in qcow2-cluster.c, (5) a large request in the bdrv_check_byte_request function in block.c and other block drivers, (6) crafted cluster indexes in the get_refcount function in qcow2-refcount.c, or (7) a large number of blocks in the cloop_open function in cloop.c, which trigger buffer overflows, memory corruption, large memory allocations and out-of-bounds read and writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0143",
"url": "https://www.suse.com/security/cve/CVE-2014-0143"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0143",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0143",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0143"
},
{
"cve": "CVE-2014-0144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0144"
}
],
"notes": [
{
"category": "general",
"text": "QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privileges of the QEMU process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0144",
"url": "https://www.suse.com/security/cve/CVE-2014-0144"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0144",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0144",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0144"
},
{
"cve": "CVE-2014-0145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0145"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_snapshot_load_tmp in the QCOW 2 block driver (block/qcow2-snapshot.c) or (2) uncompressed chunk, (3) chunk length, or (4) number of sectors in the DMG block driver (block/dmg.c).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0145",
"url": "https://www.suse.com/security/cve/CVE-2014-0145"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0145",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0145",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-0145"
},
{
"cve": "CVE-2014-0146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0146"
}
],
"notes": [
{
"category": "general",
"text": "The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an error, related to the initialization of the snapshot_offset and nb_snapshots fields.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0146",
"url": "https://www.suse.com/security/cve/CVE-2014-0146"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0146",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0146",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0146"
},
{
"cve": "CVE-2014-0147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0147"
}
],
"notes": [
{
"category": "general",
"text": "Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0147",
"url": "https://www.suse.com/security/cve/CVE-2014-0147"
},
{
"category": "external",
"summary": "SUSE Bug 870439 for CVE-2014-0147",
"url": "https://bugzilla.suse.com/870439"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2014-0147",
"url": "https://bugzilla.suse.com/871442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0147"
},
{
"cve": "CVE-2014-0150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0150"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0150",
"url": "https://www.suse.com/security/cve/CVE-2014-0150"
},
{
"category": "external",
"summary": "SUSE Bug 873235 for CVE-2014-0150",
"url": "https://bugzilla.suse.com/873235"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0150"
},
{
"cve": "CVE-2014-0182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0182"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0182",
"url": "https://www.suse.com/security/cve/CVE-2014-0182"
},
{
"category": "external",
"summary": "SUSE Bug 874788 for CVE-2014-0182",
"url": "https://bugzilla.suse.com/874788"
},
{
"category": "external",
"summary": "SUSE Bug 964693 for CVE-2014-0182",
"url": "https://bugzilla.suse.com/964693"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0182"
},
{
"cve": "CVE-2015-3456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3456"
}
],
"notes": [
{
"category": "general",
"text": "The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3456",
"url": "https://www.suse.com/security/cve/CVE-2015-3456"
},
{
"category": "external",
"summary": "SUSE Bug 929339 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "external",
"summary": "SUSE Bug 932770 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "external",
"summary": "SUSE Bug 935900 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/935900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3456"
},
{
"cve": "CVE-2016-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3712"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3712",
"url": "https://www.suse.com/security/cve/CVE-2016-3712"
},
{
"category": "external",
"summary": "SUSE Bug 978160 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-3712"
},
{
"cve": "CVE-2016-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4002"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4002",
"url": "https://www.suse.com/security/cve/CVE-2016-4002"
},
{
"category": "external",
"summary": "SUSE Bug 975136 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "external",
"summary": "SUSE Bug 975138 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4002"
},
{
"cve": "CVE-2016-4020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4020"
}
],
"notes": [
{
"category": "general",
"text": "The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4020",
"url": "https://www.suse.com/security/cve/CVE-2016-4020"
},
{
"category": "external",
"summary": "SUSE Bug 975700 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "external",
"summary": "SUSE Bug 975907 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4020"
},
{
"cve": "CVE-2016-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4439"
}
],
"notes": [
{
"category": "general",
"text": "The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4439",
"url": "https://www.suse.com/security/cve/CVE-2016-4439"
},
{
"category": "external",
"summary": "SUSE Bug 980711 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "external",
"summary": "SUSE Bug 980716 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4439"
},
{
"cve": "CVE-2016-4441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4441"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4441",
"url": "https://www.suse.com/security/cve/CVE-2016-4441"
},
{
"category": "external",
"summary": "SUSE Bug 980723 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "external",
"summary": "SUSE Bug 980724 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4441"
},
{
"cve": "CVE-2016-4453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4453"
}
],
"notes": [
{
"category": "general",
"text": "The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4453",
"url": "https://www.suse.com/security/cve/CVE-2016-4453"
},
{
"category": "external",
"summary": "SUSE Bug 982223 for CVE-2016-4453",
"url": "https://bugzilla.suse.com/982223"
},
{
"category": "external",
"summary": "SUSE Bug 982225 for CVE-2016-4453",
"url": "https://bugzilla.suse.com/982225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4453"
},
{
"cve": "CVE-2016-4454",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4454"
}
],
"notes": [
{
"category": "general",
"text": "The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4454",
"url": "https://www.suse.com/security/cve/CVE-2016-4454"
},
{
"category": "external",
"summary": "SUSE Bug 982222 for CVE-2016-4454",
"url": "https://bugzilla.suse.com/982222"
},
{
"category": "external",
"summary": "SUSE Bug 982224 for CVE-2016-4454",
"url": "https://bugzilla.suse.com/982224"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4454"
},
{
"cve": "CVE-2016-4952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4952"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4952",
"url": "https://www.suse.com/security/cve/CVE-2016-4952"
},
{
"category": "external",
"summary": "SUSE Bug 981266 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "external",
"summary": "SUSE Bug 981276 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4952"
},
{
"cve": "CVE-2016-4964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4964"
}
],
"notes": [
{
"category": "general",
"text": "The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s-\u003estate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4964",
"url": "https://www.suse.com/security/cve/CVE-2016-4964"
},
{
"category": "external",
"summary": "SUSE Bug 981399 for CVE-2016-4964",
"url": "https://bugzilla.suse.com/981399"
},
{
"category": "external",
"summary": "SUSE Bug 981401 for CVE-2016-4964",
"url": "https://bugzilla.suse.com/981401"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-4964"
},
{
"cve": "CVE-2016-5105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5105"
}
],
"notes": [
{
"category": "general",
"text": "The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5105",
"url": "https://www.suse.com/security/cve/CVE-2016-5105"
},
{
"category": "external",
"summary": "SUSE Bug 982017 for CVE-2016-5105",
"url": "https://bugzilla.suse.com/982017"
},
{
"category": "external",
"summary": "SUSE Bug 982024 for CVE-2016-5105",
"url": "https://bugzilla.suse.com/982024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5105"
},
{
"cve": "CVE-2016-5106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5106"
}
],
"notes": [
{
"category": "general",
"text": "The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5106",
"url": "https://www.suse.com/security/cve/CVE-2016-5106"
},
{
"category": "external",
"summary": "SUSE Bug 982018 for CVE-2016-5106",
"url": "https://bugzilla.suse.com/982018"
},
{
"category": "external",
"summary": "SUSE Bug 982025 for CVE-2016-5106",
"url": "https://bugzilla.suse.com/982025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5106"
},
{
"cve": "CVE-2016-5107",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5107"
}
],
"notes": [
{
"category": "general",
"text": "The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5107",
"url": "https://www.suse.com/security/cve/CVE-2016-5107"
},
{
"category": "external",
"summary": "SUSE Bug 982019 for CVE-2016-5107",
"url": "https://bugzilla.suse.com/982019"
},
{
"category": "external",
"summary": "SUSE Bug 982026 for CVE-2016-5107",
"url": "https://bugzilla.suse.com/982026"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5107"
},
{
"cve": "CVE-2016-5126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5126"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5126",
"url": "https://www.suse.com/security/cve/CVE-2016-5126"
},
{
"category": "external",
"summary": "SUSE Bug 982285 for CVE-2016-5126",
"url": "https://bugzilla.suse.com/982285"
},
{
"category": "external",
"summary": "SUSE Bug 982286 for CVE-2016-5126",
"url": "https://bugzilla.suse.com/982286"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5126"
},
{
"cve": "CVE-2016-5238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5238"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5238",
"url": "https://www.suse.com/security/cve/CVE-2016-5238"
},
{
"category": "external",
"summary": "SUSE Bug 982959 for CVE-2016-5238",
"url": "https://bugzilla.suse.com/982959"
},
{
"category": "external",
"summary": "SUSE Bug 982960 for CVE-2016-5238",
"url": "https://bugzilla.suse.com/982960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5238"
},
{
"cve": "CVE-2016-5337",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5337"
}
],
"notes": [
{
"category": "general",
"text": "The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5337",
"url": "https://www.suse.com/security/cve/CVE-2016-5337"
},
{
"category": "external",
"summary": "SUSE Bug 983961 for CVE-2016-5337",
"url": "https://bugzilla.suse.com/983961"
},
{
"category": "external",
"summary": "SUSE Bug 983973 for CVE-2016-5337",
"url": "https://bugzilla.suse.com/983973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5337"
},
{
"cve": "CVE-2016-5338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5338"
}
],
"notes": [
{
"category": "general",
"text": "The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5338",
"url": "https://www.suse.com/security/cve/CVE-2016-5338"
},
{
"category": "external",
"summary": "SUSE Bug 983982 for CVE-2016-5338",
"url": "https://bugzilla.suse.com/983982"
},
{
"category": "external",
"summary": "SUSE Bug 983984 for CVE-2016-5338",
"url": "https://bugzilla.suse.com/983984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5338"
},
{
"cve": "CVE-2016-5403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5403"
}
],
"notes": [
{
"category": "general",
"text": "The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5403",
"url": "https://www.suse.com/security/cve/CVE-2016-5403"
},
{
"category": "external",
"summary": "SUSE Bug 990923 for CVE-2016-5403",
"url": "https://bugzilla.suse.com/990923"
},
{
"category": "external",
"summary": "SUSE Bug 991080 for CVE-2016-5403",
"url": "https://bugzilla.suse.com/991080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5403"
},
{
"cve": "CVE-2016-6351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6351"
}
],
"notes": [
{
"category": "general",
"text": "The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6351",
"url": "https://www.suse.com/security/cve/CVE-2016-6351"
},
{
"category": "external",
"summary": "SUSE Bug 990835 for CVE-2016-6351",
"url": "https://bugzilla.suse.com/990835"
},
{
"category": "external",
"summary": "SUSE Bug 990843 for CVE-2016-6351",
"url": "https://bugzilla.suse.com/990843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:qemu-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-arm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-curl-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-dmg-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-gluster-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-iscsi-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-block-ssh-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-extra-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-guest-agent-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.s390x",
"openSUSE Tumbleweed:qemu-ipxe-1.0.0-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ksm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-kvm-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-lang-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-ppc-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-s390-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-seabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.aarch64",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.s390x",
"openSUSE Tumbleweed:qemu-sgabios-8-1.5.x86_64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-testsuite-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-tools-2.6.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-vgabios-1.9.1-1.5.x86_64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.aarch64",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.ppc64le",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.s390x",
"openSUSE Tumbleweed:qemu-x86-2.6.1-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-6351"
}
]
}
ghsa-rwhm-5hjg-54j9
Vulnerability from github
Published
2022-05-13 01:23
Modified
2022-05-13 01:23
VLAI Severity ?
Details
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
{
"affected": [],
"aliases": [
"CVE-2012-3515"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-11-23T20:55:00Z",
"severity": "HIGH"
},
"details": "Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a \"device model\u0027s address space.\"",
"id": "GHSA-rwhm-5hjg-54j9",
"modified": "2022-05-13T01:23:55Z",
"published": "2022-05-13T01:23:55Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3515"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1233"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1234"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1235"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1236"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1262"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2012:1325"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2012-3515"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=851252"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201604-03"
},
{
"type": "WEB",
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log"
},
{
"type": "WEB",
"url": "http://git.qemu.org/?p=qemu-stable-0.15.git;a=log"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html"
},
{
"type": "WEB",
"url": "http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1233.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1234.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1235.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1236.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1262.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2012-1325.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50472"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50528"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50530"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50632"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50689"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50860"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/50913"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51413"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/55082"
},
{
"type": "WEB",
"url": "http://security.gentoo.org/glsa/glsa-201309-24.xml"
},
{
"type": "WEB",
"url": "http://support.citrix.com/article/CTX134708"
},
{
"type": "WEB",
"url": "http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2012/dsa-2543"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2012/dsa-2545"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2012/09/05/10"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/55413"
},
{
"type": "WEB",
"url": "http://www.ubuntu.com/usn/USN-1590-1"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…