csaf_suse - suse-su-2016:2589-1

suse-su-2016:2589-1

Vulnerability from csaf_suse

Published

2016-10-21 13:19

Modified

2016-10-21 13:19

Summary

Security update for qemu

Notes

Title of the patch

Security update for qemu

Description of the patch

qemu was updated to fix 19 security issues. These security issues were fixed: - CVE-2016-2392: The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU did not properly validate USB configuration descriptor objects, which allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet (bsc#967012) - CVE-2016-2391: The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers (bsc#967013) - CVE-2016-5106: The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982018) - CVE-2016-5105: The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, used an uninitialized variable, which allowed local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982017) - CVE-2016-5107: The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors (bsc#982019) - CVE-2016-5126: Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allowed local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call (bsc#982285) - CVE-2016-4454: The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read (bsc#982222) - CVE-2016-4453: The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command (bsc#982223) - CVE-2016-5338: The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer (bsc#983982) - CVE-2016-5337: The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information (bsc#983961) - CVE-2016-5238: The get_cmd function in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode (bsc#982959) - CVE-2016-5403: The virtqueue_pop function in hw/virtio/virtio.c in QEMU allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion (bsc#991080) - CVE-2016-6490: Infinite loop in the virtio framework. A privileged user inside the guest could have used this flaw to crash the Qemu instance on the host resulting in DoS (bsc#991466) - CVE-2016-6888: Integer overflow in packet initialisation in VMXNET3 device driver. A privileged user inside guest could have used this flaw to crash the Qemu instance resulting in DoS (bsc#994771) - CVE-2016-6833: Use-after-free issue in the VMWARE VMXNET3 NIC device support. A privileged user inside guest could have used this issue to crash the Qemu instance resulting in DoS (bsc#994774) - CVE-2016-7116: Host directory sharing via Plan 9 File System(9pfs) was vulnerable to a directory/path traversal issue. A privileged user inside guest could have used this flaw to access undue files on the host (bsc#996441) - CVE-2016-6836: VMWARE VMXNET3 NIC device support was leaging information leakage. A privileged user inside guest could have used this to leak host memory bytes to a guest (bsc#994760) - CVE-2016-7155: In the VMWARE PVSCSI paravirtual SCSI bus a OOB access and/or infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997858) - CVE-2016-7156: In the VMWARE PVSCSI paravirtual SCSI bus a infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997859) This non-security issue was fixed: - bsc#1000048: Fix migration failure where target host is a soon to be released SLES 12 SP2. Qemu's spice code gets an assertion.

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2016-1523,SUSE-SLE-SERVER-12-SP1-2016-1523

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for qemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "qemu was updated to fix 19 security issues.\n\nThese security issues were fixed:\n- CVE-2016-2392: The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU did not properly validate USB configuration descriptor objects, which allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet (bsc#967012)\n- CVE-2016-2391: The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers (bsc#967013)\n- CVE-2016-5106: The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982018)\n- CVE-2016-5105: The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, used an uninitialized variable, which allowed local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command (bsc#982017)\n- CVE-2016-5107: The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allowed local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors (bsc#982019)\n- CVE-2016-5126: Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allowed local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call (bsc#982285)\n- CVE-2016-4454: The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read (bsc#982222)\n- CVE-2016-4453: The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command (bsc#982223)\n- CVE-2016-5338: The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer (bsc#983982)\n- CVE-2016-5337: The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allowed local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information (bsc#983961)\n- CVE-2016-5238: The get_cmd function in hw/scsi/esp.c in QEMU allowed local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode (bsc#982959)\n- CVE-2016-5403: The virtqueue_pop function in hw/virtio/virtio.c in QEMU allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion (bsc#991080)\n- CVE-2016-6490: Infinite loop in the virtio framework. A privileged user inside the guest could have used this flaw to crash the Qemu instance on the host resulting in DoS (bsc#991466)\n- CVE-2016-6888: Integer overflow in packet initialisation in VMXNET3 device driver. A privileged user inside guest could have used this flaw to crash the Qemu instance resulting in DoS (bsc#994771)\n- CVE-2016-6833: Use-after-free issue in the VMWARE VMXNET3 NIC device support. A privileged user inside guest could have used this issue to crash the Qemu instance resulting in DoS (bsc#994774)\n- CVE-2016-7116: Host directory sharing via Plan 9 File System(9pfs) was vulnerable to a directory/path traversal issue. A privileged user inside guest could have used this flaw to access undue files on the host (bsc#996441)\n- CVE-2016-6836: VMWARE VMXNET3 NIC device support was leaging information leakage. A privileged user inside guest could have used this to leak host memory bytes to a guest (bsc#994760)\n- CVE-2016-7155: In the VMWARE PVSCSI paravirtual SCSI bus a OOB access and/or infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997858)\n- CVE-2016-7156: In the VMWARE PVSCSI paravirtual SCSI bus a infinite loop issue could have allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#997859)\n\nThis non-security issue was fixed:\n- bsc#1000048: Fix migration failure where target host is a soon to be released SLES 12 SP2. Qemu\u0027s spice code gets an assertion.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1523,SUSE-SLE-SERVER-12-SP1-2016-1523",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2589-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2589-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162589-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2589-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002344.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1000048",
        "url": "https://bugzilla.suse.com/1000048"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 967012",
        "url": "https://bugzilla.suse.com/967012"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 967013",
        "url": "https://bugzilla.suse.com/967013"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982017",
        "url": "https://bugzilla.suse.com/982017"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982018",
        "url": "https://bugzilla.suse.com/982018"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982019",
        "url": "https://bugzilla.suse.com/982019"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982222",
        "url": "https://bugzilla.suse.com/982222"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982223",
        "url": "https://bugzilla.suse.com/982223"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982285",
        "url": "https://bugzilla.suse.com/982285"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 982959",
        "url": "https://bugzilla.suse.com/982959"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 983961",
        "url": "https://bugzilla.suse.com/983961"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 983982",
        "url": "https://bugzilla.suse.com/983982"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 991080",
        "url": "https://bugzilla.suse.com/991080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 991466",
        "url": "https://bugzilla.suse.com/991466"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994760",
        "url": "https://bugzilla.suse.com/994760"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994771",
        "url": "https://bugzilla.suse.com/994771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994774",
        "url": "https://bugzilla.suse.com/994774"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 996441",
        "url": "https://bugzilla.suse.com/996441"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 997858",
        "url": "https://bugzilla.suse.com/997858"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 997859",
        "url": "https://bugzilla.suse.com/997859"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2391 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2392 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2392/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4453 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4453/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-4454 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-4454/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5105 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5105/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5106 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5106/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5107 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5107/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5126 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5126/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5238 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5337 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5337/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5338 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5338/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-5403 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-5403/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6490 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6490/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6833 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6833/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6836 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6888 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6888/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7116 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7116/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7155 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7156 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7156/"
      }
    ],
    "title": "Security update for qemu",
    "tracking": {
      "current_release_date": "2016-10-21T13:19:52Z",
      "generator": {
        "date": "2016-10-21T13:19:52Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2589-1",
      "initial_release_date": "2016-10-21T13:19:52Z",
      "revision_history": [
        {
          "date": "2016-10-21T13:19:52Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-ipxe-1.0.0-21.1.noarch",
                "product": {
                  "name": "qemu-ipxe-1.0.0-21.1.noarch",
                  "product_id": "qemu-ipxe-1.0.0-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-seabios-1.8.1-21.1.noarch",
                "product": {
                  "name": "qemu-seabios-1.8.1-21.1.noarch",
                  "product_id": "qemu-seabios-1.8.1-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-sgabios-8-21.1.noarch",
                "product": {
                  "name": "qemu-sgabios-8-21.1.noarch",
                  "product_id": "qemu-sgabios-8-21.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-vgabios-1.8.1-21.1.noarch",
                "product": {
                  "name": "qemu-vgabios-1.8.1-21.1.noarch",
                  "product_id": "qemu-vgabios-1.8.1-21.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-2.3.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-block-curl-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-block-curl-2.3.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-guest-agent-2.3.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-lang-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-lang-2.3.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-ppc-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-ppc-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-ppc-2.3.1-21.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-21.1.ppc64le",
                "product": {
                  "name": "qemu-tools-2.3.1-21.1.ppc64le",
                  "product_id": "qemu-tools-2.3.1-21.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-2.3.1-21.1.s390x",
                  "product_id": "qemu-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-block-curl-2.3.1-21.1.s390x",
                  "product_id": "qemu-block-curl-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-21.1.s390x",
                  "product_id": "qemu-guest-agent-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-kvm-2.3.1-21.1.s390x",
                  "product_id": "qemu-kvm-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-lang-2.3.1-21.1.s390x",
                  "product_id": "qemu-lang-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-s390-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-s390-2.3.1-21.1.s390x",
                  "product_id": "qemu-s390-2.3.1-21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-21.1.s390x",
                "product": {
                  "name": "qemu-tools-2.3.1-21.1.s390x",
                  "product_id": "qemu-tools-2.3.1-21.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-2.3.1-21.1.x86_64",
                  "product_id": "qemu-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-block-curl-2.3.1-21.1.x86_64",
                  "product_id": "qemu-block-curl-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-kvm-2.3.1-21.1.x86_64",
                  "product_id": "qemu-kvm-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-tools-2.3.1-21.1.x86_64",
                  "product_id": "qemu-tools-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-x86-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-x86-2.3.1-21.1.x86_64",
                  "product_id": "qemu-x86-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-block-rbd-2.3.1-21.1.x86_64",
                  "product_id": "qemu-block-rbd-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-21.1.x86_64",
                  "product_id": "qemu-guest-agent-2.3.1-21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-21.1.x86_64",
                "product": {
                  "name": "qemu-lang-2.3.1-21.1.x86_64",
                  "product_id": "qemu-lang-2.3.1-21.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-21.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-21.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-21.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-kvm-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-s390-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-21.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-21.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-kvm-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-lang-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-s390-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-21.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-21.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-21.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-21.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-2391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2391",
          "url": "https://www.suse.com/security/cve/CVE-2016-2391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967012 for CVE-2016-2391",
          "url": "https://bugzilla.suse.com/967012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967013 for CVE-2016-2391",
          "url": "https://bugzilla.suse.com/967013"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967101 for CVE-2016-2391",
          "url": "https://bugzilla.suse.com/967101"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-2391"
    },
    {
      "cve": "CVE-2016-2392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2392",
          "url": "https://www.suse.com/security/cve/CVE-2016-2392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967012 for CVE-2016-2392",
          "url": "https://bugzilla.suse.com/967012"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967090 for CVE-2016-2392",
          "url": "https://bugzilla.suse.com/967090"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-2392"
    },
    {
      "cve": "CVE-2016-4453",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4453"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4453",
          "url": "https://www.suse.com/security/cve/CVE-2016-4453"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982223 for CVE-2016-4453",
          "url": "https://bugzilla.suse.com/982223"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982225 for CVE-2016-4453",
          "url": "https://bugzilla.suse.com/982225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4453"
    },
    {
      "cve": "CVE-2016-4454",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-4454"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-4454",
          "url": "https://www.suse.com/security/cve/CVE-2016-4454"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982222 for CVE-2016-4454",
          "url": "https://bugzilla.suse.com/982222"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982224 for CVE-2016-4454",
          "url": "https://bugzilla.suse.com/982224"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-4454"
    },
    {
      "cve": "CVE-2016-5105",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5105"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5105",
          "url": "https://www.suse.com/security/cve/CVE-2016-5105"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982017 for CVE-2016-5105",
          "url": "https://bugzilla.suse.com/982017"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982024 for CVE-2016-5105",
          "url": "https://bugzilla.suse.com/982024"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5105"
    },
    {
      "cve": "CVE-2016-5106",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5106"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5106",
          "url": "https://www.suse.com/security/cve/CVE-2016-5106"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982018 for CVE-2016-5106",
          "url": "https://bugzilla.suse.com/982018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982025 for CVE-2016-5106",
          "url": "https://bugzilla.suse.com/982025"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5106"
    },
    {
      "cve": "CVE-2016-5107",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5107"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5107",
          "url": "https://www.suse.com/security/cve/CVE-2016-5107"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982019 for CVE-2016-5107",
          "url": "https://bugzilla.suse.com/982019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982026 for CVE-2016-5107",
          "url": "https://bugzilla.suse.com/982026"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5107"
    },
    {
      "cve": "CVE-2016-5126",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5126"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5126",
          "url": "https://www.suse.com/security/cve/CVE-2016-5126"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982285 for CVE-2016-5126",
          "url": "https://bugzilla.suse.com/982285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982286 for CVE-2016-5126",
          "url": "https://bugzilla.suse.com/982286"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5126"
    },
    {
      "cve": "CVE-2016-5238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5238",
          "url": "https://www.suse.com/security/cve/CVE-2016-5238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982959 for CVE-2016-5238",
          "url": "https://bugzilla.suse.com/982959"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982960 for CVE-2016-5238",
          "url": "https://bugzilla.suse.com/982960"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-5238"
    },
    {
      "cve": "CVE-2016-5337",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5337"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5337",
          "url": "https://www.suse.com/security/cve/CVE-2016-5337"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983961 for CVE-2016-5337",
          "url": "https://bugzilla.suse.com/983961"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983973 for CVE-2016-5337",
          "url": "https://bugzilla.suse.com/983973"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5337"
    },
    {
      "cve": "CVE-2016-5338",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5338"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5338",
          "url": "https://www.suse.com/security/cve/CVE-2016-5338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983982 for CVE-2016-5338",
          "url": "https://bugzilla.suse.com/983982"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 983984 for CVE-2016-5338",
          "url": "https://bugzilla.suse.com/983984"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5338"
    },
    {
      "cve": "CVE-2016-5403",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-5403"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-5403",
          "url": "https://www.suse.com/security/cve/CVE-2016-5403"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 990923 for CVE-2016-5403",
          "url": "https://bugzilla.suse.com/990923"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991080 for CVE-2016-5403",
          "url": "https://bugzilla.suse.com/991080"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-5403"
    },
    {
      "cve": "CVE-2016-6490",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6490"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6490",
          "url": "https://www.suse.com/security/cve/CVE-2016-6490"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 991466 for CVE-2016-6490",
          "url": "https://bugzilla.suse.com/991466"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 993854 for CVE-2016-6490",
          "url": "https://bugzilla.suse.com/993854"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6490"
    },
    {
      "cve": "CVE-2016-6833",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6833"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6833",
          "url": "https://www.suse.com/security/cve/CVE-2016-6833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994774 for CVE-2016-6833",
          "url": "https://bugzilla.suse.com/994774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994775 for CVE-2016-6833",
          "url": "https://bugzilla.suse.com/994775"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6833"
    },
    {
      "cve": "CVE-2016-6836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6836",
          "url": "https://www.suse.com/security/cve/CVE-2016-6836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994760 for CVE-2016-6836",
          "url": "https://bugzilla.suse.com/994760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994761 for CVE-2016-6836",
          "url": "https://bugzilla.suse.com/994761"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6836"
    },
    {
      "cve": "CVE-2016-6888",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6888"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6888",
          "url": "https://www.suse.com/security/cve/CVE-2016-6888"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994771 for CVE-2016-6888",
          "url": "https://bugzilla.suse.com/994771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994772 for CVE-2016-6888",
          "url": "https://bugzilla.suse.com/994772"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6888"
    },
    {
      "cve": "CVE-2016-7116",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7116"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7116",
          "url": "https://www.suse.com/security/cve/CVE-2016-7116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 996441 for CVE-2016-7116",
          "url": "https://bugzilla.suse.com/996441"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-7116"
    },
    {
      "cve": "CVE-2016-7155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7155",
          "url": "https://www.suse.com/security/cve/CVE-2016-7155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 997858 for CVE-2016-7155",
          "url": "https://bugzilla.suse.com/997858"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7155"
    },
    {
      "cve": "CVE-2016-7156",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7156"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7156",
          "url": "https://www.suse.com/security/cve/CVE-2016-7156"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 997859 for CVE-2016-7156",
          "url": "https://bugzilla.suse.com/997859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-21.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-21T13:19:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7156"
    }
  ]
}

CVE-2016-5238 (GCVE-0-2016-5238)

Vulnerability from cvelistv5

Published

2016-06-14 14:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/02/2	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/90995	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/06/02/9	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1341931	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.977Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[qemu-devel] 20160601 Re: [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html"
          },
          {
            "name": "[qemu-devel] 20160531 [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html"
          },
          {
            "name": "[oss-security] 20160602 CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/02/2"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "90995",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90995"
          },
          {
            "name": "[oss-security] 20160602 Re: CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/02/9"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341931"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[qemu-devel] 20160601 Re: [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html"
        },
        {
          "name": "[qemu-devel] 20160531 [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html"
        },
        {
          "name": "[oss-security] 20160602 CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/02/2"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "90995",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90995"
        },
        {
          "name": "[oss-security] 20160602 Re: CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/02/9"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341931"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5238",
    "datePublished": "2016-06-14T14:00:00",
    "dateReserved": "2016-06-02T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5403 (GCVE-0-2016-5403)

Vulnerability from cvelistv5

Published

2016-08-02 16:00

Modified

2024-08-06 01:00

Severity ?

CWE

Summary

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.

References

►

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1756.html	vendor-advisory, x_refsource_REDHAT
	http://xenbits.xen.org/xsa/advisory-184.html	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1655.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1358359	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1763.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1585.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1653.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1607.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1654.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1036476	vdb-entry, x_refsource_SECTRACK
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1606.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1586.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1943.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/92148	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1652.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:59.915Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "RHSA-2016:1756",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1756.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-184.html"
          },
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "RHSA-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1655.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1358359"
          },
          {
            "name": "RHSA-2016:1763",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1763.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html"
          },
          {
            "name": "RHSA-2016:1585",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1585.html"
          },
          {
            "name": "RHSA-2016:1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1653.html"
          },
          {
            "name": "RHSA-2016:1607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1607.html"
          },
          {
            "name": "RHSA-2016:1654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1654.html"
          },
          {
            "name": "1036476",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036476"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "RHSA-2016:1606",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1606.html"
          },
          {
            "name": "RHSA-2016:1586",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1586.html"
          },
          {
            "name": "RHSA-2016:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1943.html"
          },
          {
            "name": "92148",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92148"
          },
          {
            "name": "RHSA-2016:1652",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1652.html"
          },
          {
            "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-20T10:06:11",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "RHSA-2016:1756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1756.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-184.html"
        },
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "RHSA-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1655.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1358359"
        },
        {
          "name": "RHSA-2016:1763",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1763.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html"
        },
        {
          "name": "RHSA-2016:1585",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1585.html"
        },
        {
          "name": "RHSA-2016:1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1653.html"
        },
        {
          "name": "RHSA-2016:1607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1607.html"
        },
        {
          "name": "RHSA-2016:1654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1654.html"
        },
        {
          "name": "1036476",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036476"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "RHSA-2016:1606",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1606.html"
        },
        {
          "name": "RHSA-2016:1586",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1586.html"
        },
        {
          "name": "RHSA-2016:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1943.html"
        },
        {
          "name": "92148",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92148"
        },
        {
          "name": "RHSA-2016:1652",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1652.html"
        },
        {
          "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5403",
    "datePublished": "2016-08-02T16:00:00",
    "dateReserved": "2016-06-10T00:00:00",
    "dateUpdated": "2024-08-06T01:00:59.915Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5107 (GCVE-0-2016-5107)

Vulnerability from cvelistv5

Published

2016-09-02 14:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/25/7	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/05/26/9	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1336461	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90874	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:48.220Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/7"
          },
          {
            "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/9"
          },
          {
            "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: check \u0027read_queue_head\u0027 index val",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336461"
          },
          {
            "name": "90874",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90874"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/7"
        },
        {
          "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/9"
        },
        {
          "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: check \u0027read_queue_head\u0027 index val",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336461"
        },
        {
          "name": "90874",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90874"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5107",
    "datePublished": "2016-09-02T14:00:00",
    "dateReserved": "2016-05-26T00:00:00",
    "dateUpdated": "2024-08-06T00:53:48.220Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5337 (GCVE-0-2016-5337)

Vulnerability from cvelistv5

Published

2016-06-14 14:00

Modified

2024-08-06 01:00

Severity ?

CWE

Summary

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/91097	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/06/08/13	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/08/3	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:59.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6"
          },
          {
            "name": "91097",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91097"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "[oss-security] 20160608 Re: CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/08/13"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "[qemu-devel] 20160607 [PULL 06/13] scsi: megasas: null terminate bios version buffer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html"
          },
          {
            "name": "[oss-security] 20160608 CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/08/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6"
        },
        {
          "name": "91097",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91097"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "[oss-security] 20160608 Re: CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/08/13"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "[qemu-devel] 20160607 [PULL 06/13] scsi: megasas: null terminate bios version buffer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html"
        },
        {
          "name": "[oss-security] 20160608 CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/08/3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5337",
    "datePublished": "2016-06-14T14:00:00",
    "dateReserved": "2016-06-08T00:00:00",
    "dateUpdated": "2024-08-06T01:00:59.190Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7156 (GCVE-0-2016-7156)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/06/3	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/07/2	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/92774	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20160906 [PATCH v3] scsi: pvscsi: avoid infinite loop while building SG list",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html"
          },
          {
            "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/06/3"
          },
          {
            "name": "[qemu-devel] 20160906 [PATCH v2] scsi: pvscsi: check request descriptor SG element count",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html"
          },
          {
            "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/07/2"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "92774",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92774"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[qemu-devel] 20160906 [PATCH v3] scsi: pvscsi: avoid infinite loop while building SG list",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html"
        },
        {
          "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/06/3"
        },
        {
          "name": "[qemu-devel] 20160906 [PATCH v2] scsi: pvscsi: check request descriptor SG element count",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html"
        },
        {
          "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/07/2"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "92774",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92774"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7156",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[qemu-devel] 20160906 [PATCH v3] scsi: pvscsi: avoid infinite loop while building SG list",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html"
            },
            {
              "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/06/3"
            },
            {
              "name": "[qemu-devel] 20160906 [PATCH v2] scsi: pvscsi: check request descriptor SG element count",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html"
            },
            {
              "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/07/2"
            },
            {
              "name": "GLSA-201609-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201609-01"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8"
            },
            {
              "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
            },
            {
              "name": "92774",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92774"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7156",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-09-06T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6490 (GCVE-0-2016-6490)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:29

Severity ?

CWE

Summary

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2016/07/28/4	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/07/28/9	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1e7aed70144b4673fc26e73062064b6724795e5f	x_refsource_CONFIRM
	https://lists.gnu.org/archive/html/qemu-devel/2016-07/msg06246.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:29:20.254Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160728 CVE Request Qemu: virtio: infinite loop in virtqueue_pop",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/28/4"
          },
          {
            "name": "[oss-security] 20160728 Re: CVE Request Qemu: virtio: infinite loop in virtqueue_pop",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/07/28/9"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1e7aed70144b4673fc26e73062064b6724795e5f"
          },
          {
            "name": "[qemu-devel] 20160726 [PATCH] virtio: check vring descriptor buffer length",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-07/msg06246.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20160728 CVE Request Qemu: virtio: infinite loop in virtqueue_pop",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/28/4"
        },
        {
          "name": "[oss-security] 20160728 Re: CVE Request Qemu: virtio: infinite loop in virtqueue_pop",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/07/28/9"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=1e7aed70144b4673fc26e73062064b6724795e5f"
        },
        {
          "name": "[qemu-devel] 20160726 [PATCH] virtio: check vring descriptor buffer length",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-07/msg06246.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6490",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-07-28T00:00:00",
    "dateUpdated": "2024-08-06T01:29:20.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6888 (GCVE-0-2016-6888)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.

References

►

URL

Tags

	http://www.securityfocus.com/bid/92556	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/08/19/6	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/19/10	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:38.554Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92556",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92556"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c"
          },
          {
            "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
          },
          {
            "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "92556",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92556"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c"
        },
        {
          "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
        },
        {
          "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "92556",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92556"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c"
            },
            {
              "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201609-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201609-01"
            },
            {
              "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
            },
            {
              "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
            },
            {
              "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6888",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-19T00:00:00",
    "dateUpdated": "2024-08-06T01:43:38.554Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5126 (GCVE-0-2016-5126)

Vulnerability from cvelistv5

Published

2016-06-01 22:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2016-1756.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1655.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/05/30/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2016-1763.html	vendor-advisory, x_refsource_REDHAT
	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90948	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-1653.html	vendor-advisory, x_refsource_REDHAT
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-1607.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-1654.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2016-1606.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/05/30/7	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1340924	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.343Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2016:1756",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1756.html"
          },
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "RHSA-2016:1655",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1655.html"
          },
          {
            "name": "[oss-security] 20160530 CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/30/6"
          },
          {
            "name": "RHSA-2016:1763",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1763.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
          },
          {
            "name": "90948",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90948"
          },
          {
            "name": "RHSA-2016:1653",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1653.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196"
          },
          {
            "name": "RHSA-2016:1607",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1607.html"
          },
          {
            "name": "RHSA-2016:1654",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1654.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "RHSA-2016:1606",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1606.html"
          },
          {
            "name": "[oss-security] 20160530 Re: CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/30/7"
          },
          {
            "name": "[qemu-block] 20160524 [Qemu-block] [PATCH] block/iscsi: avoid potential overflow of acb-\u003etask-\u003ecdb",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340924"
          },
          {
            "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-20T10:06:12",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2016:1756",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1756.html"
        },
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "RHSA-2016:1655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1655.html"
        },
        {
          "name": "[oss-security] 20160530 CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/30/6"
        },
        {
          "name": "RHSA-2016:1763",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1763.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
        },
        {
          "name": "90948",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90948"
        },
        {
          "name": "RHSA-2016:1653",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1653.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196"
        },
        {
          "name": "RHSA-2016:1607",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1607.html"
        },
        {
          "name": "RHSA-2016:1654",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1654.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "RHSA-2016:1606",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-1606.html"
        },
        {
          "name": "[oss-security] 20160530 Re: CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/30/7"
        },
        {
          "name": "[qemu-block] 20160524 [Qemu-block] [PATCH] block/iscsi: avoid potential overflow of acb-\u003etask-\u003ecdb",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1340924"
        },
        {
          "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5126",
    "datePublished": "2016-06-01T22:00:00",
    "dateReserved": "2016-05-30T00:00:00",
    "dateUpdated": "2024-08-06T00:53:47.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5105 (GCVE-0-2016-5105)

Vulnerability from cvelistv5

Published

2016-09-02 14:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/25/5	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/26/7	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1339583	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/5"
          },
          {
            "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: initialise local configuration da",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1339583"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/5"
        },
        {
          "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: initialise local configuration da",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1339583"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5105",
    "datePublished": "2016-09-02T14:00:00",
    "dateReserved": "2016-05-26T00:00:00",
    "dateUpdated": "2024-08-06T00:53:47.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2391 (GCVE-0-2016-2391)

Vulnerability from cvelistv5

Published

2016-06-16 18:00

Modified

2024-08-05 23:24

Severity ?

CWE

Summary

The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.

References

►

URL

Tags

	http://www.securityfocus.com/bid/83263	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/02/16/2	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2974-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1304794	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:24:49.307Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "83263",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83263"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360"
          },
          {
            "name": "[oss-security] 20160216 CVE request Qemu: usb: multiple eof_timers in ohci leads to null pointer dereference",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/02/16/2"
          },
          {
            "name": "USN-2974-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2974-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1304794"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "[qemu-devel] 20160216 [Qemu-devel] [PATCH] usb: ohci avoid multiple eof timers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-02-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "83263",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/83263"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360"
        },
        {
          "name": "[oss-security] 20160216 CVE request Qemu: usb: multiple eof_timers in ohci leads to null pointer dereference",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/02/16/2"
        },
        {
          "name": "USN-2974-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2974-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1304794"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "[qemu-devel] 20160216 [Qemu-devel] [PATCH] usb: ohci avoid multiple eof timers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2391",
    "datePublished": "2016-06-16T18:00:00",
    "dateReserved": "2016-02-16T00:00:00",
    "dateUpdated": "2024-08-05T23:24:49.307Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4454 (GCVE-0-2016-4454)

Vulnerability from cvelistv5

Published

2016-06-01 22:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/30/3	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05271.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/90927	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1336429	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:25.681Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[oss-security] 20160530 CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/30/3"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "[qemu-devel] 20160530 [Qemu-devel] [PATCH 1/4] vmsvga: move fifo sanity checks to vmsvga_fifo_length",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05271.html"
          },
          {
            "name": "90927",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90927"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336429"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[oss-security] 20160530 CVE-2016-4454 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/30/3"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "[qemu-devel] 20160530 [Qemu-devel] [PATCH 1/4] vmsvga: move fifo sanity checks to vmsvga_fifo_length",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05271.html"
        },
        {
          "name": "90927",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90927"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336429"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-4454",
    "datePublished": "2016-06-01T22:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T00:32:25.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2392 (GCVE-0-2016-2392)

Vulnerability from cvelistv5

Published

2016-06-16 18:00

Modified

2024-08-05 23:24

Severity ?

CWE

Summary

The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.

References

►

URL

Tags

	http://www.securityfocus.com/bid/83274	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/02/16/7	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201604-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2974-1	vendor-advisory, x_refsource_UBUNTU
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=80eecda8e5d09c442c24307f340840a5b70ea3b9	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1302299	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:24:49.312Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "83274",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/83274"
          },
          {
            "name": "[qemu-devel] 20160211 [Qemu-devel] [PATCH] usb: check USB configuration descriptor object",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html"
          },
          {
            "name": "[oss-security] 20160216 CVE request Qemu: usb: null pointer dereference in remote NDIS control message handling",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/02/16/7"
          },
          {
            "name": "GLSA-201604-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201604-01"
          },
          {
            "name": "USN-2974-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2974-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=80eecda8e5d09c442c24307f340840a5b70ea3b9"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1302299"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "[qemu-stable] 20160329 [Qemu-stable] [ANNOUNCE] QEMU 2.5.1 Stable released",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-02-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "83274",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/83274"
        },
        {
          "name": "[qemu-devel] 20160211 [Qemu-devel] [PATCH] usb: check USB configuration descriptor object",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html"
        },
        {
          "name": "[oss-security] 20160216 CVE request Qemu: usb: null pointer dereference in remote NDIS control message handling",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/02/16/7"
        },
        {
          "name": "GLSA-201604-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201604-01"
        },
        {
          "name": "USN-2974-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2974-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=80eecda8e5d09c442c24307f340840a5b70ea3b9"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1302299"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "[qemu-stable] 20160329 [Qemu-stable] [ANNOUNCE] QEMU 2.5.1 Stable released",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2392",
    "datePublished": "2016-06-16T18:00:00",
    "dateReserved": "2016-02-16T00:00:00",
    "dateUpdated": "2024-08-05T23:24:49.312Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6833 (GCVE-0-2016-6833)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.

References

►

URL

Tags

	http://www.securityfocus.com/bid/93255	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/12/1	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/08/18/3	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.851Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "93255",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93255"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20160812 CVE request: Qemu net: vmxnet3: use after free while writing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/12/1"
          },
          {
            "name": "[qemu-devel] 20160809 [PULL 2/3] net: vmxnet3: check for device_active before write",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE request: Qemu net: vmxnet3: use after free while writing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "93255",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93255"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20160812 CVE request: Qemu net: vmxnet3: use after free while writing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/12/1"
        },
        {
          "name": "[qemu-devel] 20160809 [PULL 2/3] net: vmxnet3: check for device_active before write",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE request: Qemu net: vmxnet3: use after free while writing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6833",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.851Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7155 (GCVE-0-2016-7155)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2016/09/07/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/92772	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00050.html	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7f61f4690dd153be98900a2a508b88989e692753	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/09/06/2	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.468Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/07/1"
          },
          {
            "name": "92772",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92772"
          },
          {
            "name": "[qemu-devel] 20160901 [PATCH v3] scsi: check page count while initialising descriptor rings",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00050.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7f61f4690dd153be98900a2a508b88989e692753"
          },
          {
            "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/06/2"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/07/1"
        },
        {
          "name": "92772",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92772"
        },
        {
          "name": "[qemu-devel] 20160901 [PATCH v3] scsi: check page count while initialising descriptor rings",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00050.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=7f61f4690dd153be98900a2a508b88989e692753"
        },
        {
          "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/06/2"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7155",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/07/1"
            },
            {
              "name": "92772",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92772"
            },
            {
              "name": "[qemu-devel] 20160901 [PATCH v3] scsi: check page count while initialising descriptor rings",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00050.html"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=7f61f4690dd153be98900a2a508b88989e692753",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=7f61f4690dd153be98900a2a508b88989e692753"
            },
            {
              "name": "[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/06/2"
            },
            {
              "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7155",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-09-06T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.468Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5338 (GCVE-0-2016-5338)

Vulnerability from cvelistv5

Published

2016-06-14 14:00

Modified

2024-08-06 01:00

Severity ?

CWE

Summary

The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.

References

►

URL

Tags

	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/06/08/14	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/91079	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/06/07/3	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:00:59.975Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec"
          },
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[qemu-devel] 20160606 [Qemu-devel] [PATCH v3] scsi: esp: check TI buffer index before read/write",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html"
          },
          {
            "name": "[oss-security] 20160608 Re: CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/08/14"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "91079",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/91079"
          },
          {
            "name": "[oss-security] 20160607 CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/06/07/3"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec"
        },
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[qemu-devel] 20160606 [Qemu-devel] [PATCH v3] scsi: esp: check TI buffer index before read/write",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html"
        },
        {
          "name": "[oss-security] 20160608 Re: CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/08/14"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "91079",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/91079"
        },
        {
          "name": "[oss-security] 20160607 CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/06/07/3"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5338",
    "datePublished": "2016-06-14T14:00:00",
    "dateReserved": "2016-06-08T00:00:00",
    "dateUpdated": "2024-08-06T01:00:59.975Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7116 (GCVE-0-2016-7116)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03917.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/30/3	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/92680	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/30/1	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04231.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20160826 [PATCH v2 0/5] 9P security fixes",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03917.html"
          },
          {
            "name": "[oss-security] 20160830 Re: CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/30/3"
          },
          {
            "name": "92680",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92680"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "[oss-security] 20160830 CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/30/1"
          },
          {
            "name": "[qemu-devel] 20160830 [PATCH v4 0/3] 9pfs security fixes",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04231.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20160826 [PATCH v2 0/5] 9P security fixes",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03917.html"
        },
        {
          "name": "[oss-security] 20160830 Re: CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/30/3"
        },
        {
          "name": "92680",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92680"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=56f101ecce0eafd09e2daf1c4eeb1377d6959261"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "[oss-security] 20160830 CVE request: Qemu: 9p: directory traversal flaw in 9p virtio backend",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/30/1"
        },
        {
          "name": "[qemu-devel] 20160830 [PATCH v4 0/3] 9pfs security fixes",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04231.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-7116",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-30T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-5106 (GCVE-0-2016-5106)

Vulnerability from cvelistv5

Published

2016-09-02 14:00

Modified

2024-08-06 00:53

Severity ?

CWE

Summary

The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/26/8	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/05/25/6	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1339578	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:53:47.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/26/8"
          },
          {
            "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH 1/3] scsi: megasas: use appropriate property buffer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/25/6"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1339578"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/26/8"
        },
        {
          "name": "[qemu-devel] 20160525 [Qemu-devel] [PATCH 1/3] scsi: megasas: use appropriate property buffer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "name": "[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/25/6"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1339578"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-5106",
    "datePublished": "2016-09-02T14:00:00",
    "dateReserved": "2016-05-26T00:00:00",
    "dateUpdated": "2024-08-06T00:53:47.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-4453 (GCVE-0-2016-4453)

Vulnerability from cvelistv5

Published

2016-06-01 22:00

Modified

2024-08-06 00:32

Severity ?

CWE

Summary

The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.

References

►

URL

Tags

	http://www.ubuntu.com/usn/USN-3047-1	vendor-advisory, x_refsource_UBUNTU
	https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05270.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-3047-2	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1336650	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/90928	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2016/05/30/2	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T00:32:24.862Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3047-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-1"
          },
          {
            "name": "[qemu-devel] 20160530 [Qemu-devel] [PATCH 4/4] vmsvga: don\u0027t process more than 1024 fifo commands at once",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05270.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "USN-3047-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-3047-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336650"
          },
          {
            "name": "90928",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/90928"
          },
          {
            "name": "[oss-security] 20160530 CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/05/30/2"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-05-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-3047-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-1"
        },
        {
          "name": "[qemu-devel] 20160530 [Qemu-devel] [PATCH 4/4] vmsvga: don\u0027t process more than 1024 fifo commands at once",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg05270.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "USN-3047-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-3047-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336650"
        },
        {
          "name": "90928",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/90928"
        },
        {
          "name": "[oss-security] 20160530 CVE-2016-4453 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/05/30/2"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-4453",
    "datePublished": "2016-06-01T22:00:00",
    "dateReserved": "2016-05-02T00:00:00",
    "dateUpdated": "2024-08-06T00:32:24.862Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6836 (GCVE-0-2016-6836)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.

References

►

URL

Tags

	http://www.securityfocus.com/bid/92444	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/08/11/5	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/18/5	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92444",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92444"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf"
          },
          {
            "name": "[oss-security] 20160812 CVE Request Qemu: Information leak in vmxnet3_complete_packet",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/11/5"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE Request Qemu: Information leak in vmxnet3_complete_packet",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/5"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[qemu-devel] 20160811 [PATCH] net: vmxnet: initialise local tx descriptor",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "92444",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92444"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf"
        },
        {
          "name": "[oss-security] 20160812 CVE Request Qemu: Information leak in vmxnet3_complete_packet",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/11/5"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE Request Qemu: Information leak in vmxnet3_complete_packet",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/5"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[qemu-devel] 20160811 [PATCH] net: vmxnet: initialise local tx descriptor",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6836",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:2589-1

Vulnerability from csaf_suse

CVE-2016-5238 (GCVE-0-2016-5238)

Vulnerability from cvelistv5

CVE-2016-5403 (GCVE-0-2016-5403)

Vulnerability from cvelistv5

CVE-2016-5107 (GCVE-0-2016-5107)

Vulnerability from cvelistv5

CVE-2016-5337 (GCVE-0-2016-5337)

Vulnerability from cvelistv5

CVE-2016-7156 (GCVE-0-2016-7156)

Vulnerability from cvelistv5

CVE-2016-6490 (GCVE-0-2016-6490)

Vulnerability from cvelistv5

CVE-2016-6888 (GCVE-0-2016-6888)

Vulnerability from cvelistv5

CVE-2016-5126 (GCVE-0-2016-5126)

Vulnerability from cvelistv5

CVE-2016-5105 (GCVE-0-2016-5105)

Vulnerability from cvelistv5

CVE-2016-2391 (GCVE-0-2016-2391)

Vulnerability from cvelistv5

CVE-2016-4454 (GCVE-0-2016-4454)

Vulnerability from cvelistv5

CVE-2016-2392 (GCVE-0-2016-2392)

Vulnerability from cvelistv5

CVE-2016-6833 (GCVE-0-2016-6833)

Vulnerability from cvelistv5

CVE-2016-7155 (GCVE-0-2016-7155)

Vulnerability from cvelistv5

CVE-2016-5338 (GCVE-0-2016-5338)

Vulnerability from cvelistv5

CVE-2016-7116 (GCVE-0-2016-7116)

Vulnerability from cvelistv5

CVE-2016-5106 (GCVE-0-2016-5106)

Vulnerability from cvelistv5

CVE-2016-4453 (GCVE-0-2016-4453)

Vulnerability from cvelistv5

CVE-2016-6836 (GCVE-0-2016-6836)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature