csaf_suse - suse-su-2017:1241-1

suse-su-2017:1241-1

Vulnerability from csaf_suse

Published

2017-05-11 08:39

Modified

2017-05-11 08:39

Summary

Security update for qemu

Notes

Title of the patch

Security update for qemu

Description of the patch

This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024972) - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004) - CVE-2017-5856: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a memory leakage issue allowing a privileged user to leak host memory resulting in DoS (bsc#1023053) - CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013285) - CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in 'ehci_init_transfer'. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014111) - CVE-2016-9907: The USB redirector usb-guest support was vulnerable to a memory leakage flaw when destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could have used this issue to leak host memory, resulting in DoS for a host (bsc#1014109) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702) - CVE-2016-10155: The virtual hardware watchdog 'wdt_i6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021129) - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020589) - CVE-2017-5525: The ac97 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020491) - CVE-2017-5667: The SDHCI device emulation support was vulnerable to an OOB heap access issue allowing a privileged user inside the guest to crash the Qemu process resulting in DoS or potentially execute arbitrary code with privileges of the Qemu process on the host (bsc#1022541) - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow allowing a privileged user inside the guest to crash the Qemu process resulting in DoS (bnc#1023907) These non-security issues were fixed: - Fix post script for qemu-guest-agent rpm to actually activate the guest agent at rpm install time - Fixed various inaccuracies in cirrus vga device emulation - Fixed cause of infrequent migration failures from bad virtio device state (bsc#1020928) - Fixed virtio interface failure (bsc#1015048) - Fixed graphical update errors introduced by previous security fix (bsc#1016779) - Fixed uint64 property parsing and add regression tests (bsc#937125)

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2017-740,SUSE-SLE-SERVER-12-SP1-2017-740

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for qemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for qemu fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024972)\n- CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004)\n- CVE-2017-5856: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a memory leakage issue allowing a privileged user to leak host memory resulting in DoS (bsc#1023053)\n- CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013285)\n- CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014111)\n- CVE-2016-9907: The USB redirector usb-guest support was vulnerable to a memory leakage flaw when destroying the USB redirector in \u0027usbredir_handle_destroy\u0027.  A guest user/process could have used this issue to leak host memory, resulting in DoS for a host (bsc#1014109)\n- CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702)\n- CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1014702)\n- CVE-2016-10155: The virtual hardware watchdog \u0027wdt_i6300esb\u0027 was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021129)\n- CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020589)\n- CVE-2017-5525: The ac97 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1020491)\n- CVE-2017-5667: The SDHCI device emulation support was vulnerable to an OOB heap access issue allowing a privileged user inside the guest to crash the Qemu process resulting in DoS or potentially execute arbitrary code with privileges of the Qemu process on the host (bsc#1022541)\n- CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow allowing a privileged user inside the guest to crash the Qemu process resulting in DoS (bnc#1023907)\n\nThese non-security issues were fixed:\n\n- Fix post script for qemu-guest-agent rpm to actually activate the guest agent at rpm install time\n- Fixed various inaccuracies in cirrus vga device emulation\n- Fixed cause of infrequent migration failures from bad virtio device state (bsc#1020928)\n- Fixed virtio interface failure (bsc#1015048)\n- Fixed graphical update errors introduced by previous security fix (bsc#1016779)\n- Fixed uint64 property parsing and add regression tests (bsc#937125)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2017-740,SUSE-SLE-SERVER-12-SP1-2017-740",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1241-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:1241-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171241-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:1241-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-May/002856.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1013285",
        "url": "https://bugzilla.suse.com/1013285"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014109",
        "url": "https://bugzilla.suse.com/1014109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014111",
        "url": "https://bugzilla.suse.com/1014111"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014702",
        "url": "https://bugzilla.suse.com/1014702"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1015048",
        "url": "https://bugzilla.suse.com/1015048"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1015169",
        "url": "https://bugzilla.suse.com/1015169"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016779",
        "url": "https://bugzilla.suse.com/1016779"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020491",
        "url": "https://bugzilla.suse.com/1020491"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020589",
        "url": "https://bugzilla.suse.com/1020589"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020928",
        "url": "https://bugzilla.suse.com/1020928"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1021129",
        "url": "https://bugzilla.suse.com/1021129"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022541",
        "url": "https://bugzilla.suse.com/1022541"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023004",
        "url": "https://bugzilla.suse.com/1023004"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023053",
        "url": "https://bugzilla.suse.com/1023053"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023907",
        "url": "https://bugzilla.suse.com/1023907"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024972",
        "url": "https://bugzilla.suse.com/1024972"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 937125",
        "url": "https://bugzilla.suse.com/937125"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10155 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9776 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9907 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9907/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9911 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9911/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9921 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9921/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9922 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9922/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2615 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2620 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2620/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5525 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5526 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5526/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5667 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5667/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5856 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5856/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5898 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5898/"
      }
    ],
    "title": "Security update for qemu",
    "tracking": {
      "current_release_date": "2017-05-11T08:39:07Z",
      "generator": {
        "date": "2017-05-11T08:39:07Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:1241-1",
      "initial_release_date": "2017-05-11T08:39:07Z",
      "revision_history": [
        {
          "date": "2017-05-11T08:39:07Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-ipxe-1.0.0-32.11.noarch",
                "product": {
                  "name": "qemu-ipxe-1.0.0-32.11.noarch",
                  "product_id": "qemu-ipxe-1.0.0-32.11.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-seabios-1.8.1-32.11.noarch",
                "product": {
                  "name": "qemu-seabios-1.8.1-32.11.noarch",
                  "product_id": "qemu-seabios-1.8.1-32.11.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-sgabios-8-32.11.noarch",
                "product": {
                  "name": "qemu-sgabios-8-32.11.noarch",
                  "product_id": "qemu-sgabios-8-32.11.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-vgabios-1.8.1-32.11.noarch",
                "product": {
                  "name": "qemu-vgabios-1.8.1-32.11.noarch",
                  "product_id": "qemu-vgabios-1.8.1-32.11.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-2.3.1-32.11.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-block-curl-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-block-curl-2.3.1-32.11.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-guest-agent-2.3.1-32.11.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-lang-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-lang-2.3.1-32.11.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-ppc-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-ppc-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-ppc-2.3.1-32.11.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-32.11.ppc64le",
                "product": {
                  "name": "qemu-tools-2.3.1-32.11.ppc64le",
                  "product_id": "qemu-tools-2.3.1-32.11.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-2.3.1-32.11.s390x",
                  "product_id": "qemu-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-block-curl-2.3.1-32.11.s390x",
                  "product_id": "qemu-block-curl-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-32.11.s390x",
                  "product_id": "qemu-guest-agent-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-kvm-2.3.1-32.11.s390x",
                  "product_id": "qemu-kvm-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-lang-2.3.1-32.11.s390x",
                  "product_id": "qemu-lang-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-s390-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-s390-2.3.1-32.11.s390x",
                  "product_id": "qemu-s390-2.3.1-32.11.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-32.11.s390x",
                "product": {
                  "name": "qemu-tools-2.3.1-32.11.s390x",
                  "product_id": "qemu-tools-2.3.1-32.11.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-2.3.1-32.11.x86_64",
                  "product_id": "qemu-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-block-curl-2.3.1-32.11.x86_64",
                  "product_id": "qemu-block-curl-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-kvm-2.3.1-32.11.x86_64",
                  "product_id": "qemu-kvm-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-tools-2.3.1-32.11.x86_64",
                  "product_id": "qemu-tools-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-x86-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-x86-2.3.1-32.11.x86_64",
                  "product_id": "qemu-x86-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-block-rbd-2.3.1-32.11.x86_64",
                  "product_id": "qemu-block-rbd-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-guest-agent-2.3.1-32.11.x86_64",
                  "product_id": "qemu-guest-agent-2.3.1-32.11.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.3.1-32.11.x86_64",
                "product": {
                  "name": "qemu-lang-2.3.1-32.11.x86_64",
                  "product_id": "qemu-lang-2.3.1-32.11.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-32.11.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-32.11.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch"
        },
        "product_reference": "qemu-sgabios-8-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-32.11.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-kvm-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-ppc-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-s390-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-32.11.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch"
        },
        "product_reference": "qemu-sgabios-8-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-block-curl-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-32.11.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-kvm-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-kvm-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-lang-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-ppc-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-s390-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-seabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-32.11.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch"
        },
        "product_reference": "qemu-sgabios-8-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-tools-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.8.1-32.11.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch"
        },
        "product_reference": "qemu-vgabios-1.8.1-32.11.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.3.1-32.11.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        },
        "product_reference": "qemu-x86-2.3.1-32.11.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-10155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10155",
          "url": "https://www.suse.com/security/cve/CVE-2016-10155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1021129 for CVE-2016-10155",
          "url": "https://bugzilla.suse.com/1021129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024183 for CVE-2016-10155",
          "url": "https://bugzilla.suse.com/1024183"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-10155"
    },
    {
      "cve": "CVE-2016-9776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9776",
          "url": "https://www.suse.com/security/cve/CVE-2016-9776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013285 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1013285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013657 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1013657"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024182 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1024182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9776"
    },
    {
      "cve": "CVE-2016-9907",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9907"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in \u0027usbredir_handle_destroy\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9907",
          "url": "https://www.suse.com/security/cve/CVE-2016-9907"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014109 for CVE-2016-9907",
          "url": "https://bugzilla.suse.com/1014109"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014490 for CVE-2016-9907",
          "url": "https://bugzilla.suse.com/1014490"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9907"
    },
    {
      "cve": "CVE-2016-9911",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9911"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9911",
          "url": "https://www.suse.com/security/cve/CVE-2016-9911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014111 for CVE-2016-9911",
          "url": "https://bugzilla.suse.com/1014111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014507 for CVE-2016-9911",
          "url": "https://bugzilla.suse.com/1014507"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9911"
    },
    {
      "cve": "CVE-2016-9921",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9921"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9921",
          "url": "https://www.suse.com/security/cve/CVE-2016-9921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9921"
    },
    {
      "cve": "CVE-2016-9922",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9922"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9922",
          "url": "https://www.suse.com/security/cve/CVE-2016-9922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9922"
    },
    {
      "cve": "CVE-2017-2615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2615",
          "url": "https://www.suse.com/security/cve/CVE-2017-2615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023004 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1023004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2615"
    },
    {
      "cve": "CVE-2017-2620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2620",
          "url": "https://www.suse.com/security/cve/CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024834 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024972 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2620"
    },
    {
      "cve": "CVE-2017-5525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5525",
          "url": "https://www.suse.com/security/cve/CVE-2017-5525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020491 for CVE-2017-5525",
          "url": "https://bugzilla.suse.com/1020491"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5525"
    },
    {
      "cve": "CVE-2017-5526",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5526"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5526",
          "url": "https://www.suse.com/security/cve/CVE-2017-5526"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020589 for CVE-2017-5526",
          "url": "https://bugzilla.suse.com/1020589"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1059777 for CVE-2017-5526",
          "url": "https://bugzilla.suse.com/1059777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-5526",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5526"
    },
    {
      "cve": "CVE-2017-5667",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5667"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5667",
          "url": "https://www.suse.com/security/cve/CVE-2017-5667"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022541 for CVE-2017-5667",
          "url": "https://bugzilla.suse.com/1022541"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5667"
    },
    {
      "cve": "CVE-2017-5856",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5856"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5856",
          "url": "https://www.suse.com/security/cve/CVE-2017-5856"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023053 for CVE-2017-5856",
          "url": "https://bugzilla.suse.com/1023053"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024186 for CVE-2017-5856",
          "url": "https://bugzilla.suse.com/1024186"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5856"
    },
    {
      "cve": "CVE-2017-5898",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5898"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5898",
          "url": "https://www.suse.com/security/cve/CVE-2017-5898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023907 for CVE-2017-5898",
          "url": "https://bugzilla.suse.com/1023907"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024307 for CVE-2017-5898",
          "url": "https://bugzilla.suse.com/1024307"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-32.11.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-32.11.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-32.11.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-05-11T08:39:07Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5898"
    }
  ]
}

CVE-2016-9911 (GCVE-0-2016-9911)

Vulnerability from cvelistv5

Published

2016-12-23 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/94762	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/08/5	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.451Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "94762",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94762"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161208 Re: CVE request: Qemu: usb: ehci: memory leakage in ehci_init_transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/08/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "94762",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94762"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161208 Re: CVE request: Qemu: usb: ehci: memory leakage in ehci_init_transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/08/5"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9911",
    "datePublished": "2016-12-23T22:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5

Published

2018-07-27 19:00

Modified

2024-08-05 14:02

Severity ?

5.5 (Medium) - CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Summary

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1037870	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0351.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisory, x_refsource_REDHAT
	https://xenbits.xen.org/xsa/advisory-209.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/02/21/1	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0352.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/96378	vdb-entry, x_refsource_BID
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201703-07	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	QEMU	Qemu:	Version: 2.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "name": "1037870",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037870"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "RHSA-2017:0351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-209.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
          },
          {
            "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
          },
          {
            "name": "RHSA-2017:0352",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "name": "96378",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96378"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          },
          {
            "name": "GLSA-201703-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201703-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu:",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.8"
            }
          ]
        }
      ],
      "datePublic": "2017-02-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "name": "1037870",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037870"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "RHSA-2017:0351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-209.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
        },
        {
          "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
        },
        {
          "name": "RHSA-2017:0352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "name": "96378",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96378"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        },
        {
          "name": "GLSA-201703-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201703-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu:",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0329",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
            },
            {
              "name": "RHSA-2017:0334",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
            },
            {
              "name": "1037870",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037870"
            },
            {
              "name": "RHSA-2017:0328",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:0333",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
            },
            {
              "name": "RHSA-2017:0351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
            },
            {
              "name": "RHSA-2017:0454",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
            },
            {
              "name": "https://xenbits.xen.org/xsa/advisory-209.html",
              "refsource": "CONFIRM",
              "url": "https://xenbits.xen.org/xsa/advisory-209.html"
            },
            {
              "name": "RHSA-2017:0331",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
            },
            {
              "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
            },
            {
              "name": "RHSA-2017:0350",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
            },
            {
              "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
            },
            {
              "name": "RHSA-2017:0396",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
            },
            {
              "name": "RHSA-2017:0352",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
            },
            {
              "name": "RHSA-2017:0330",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
            },
            {
              "name": "RHSA-2017:0332",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
            },
            {
              "name": "96378",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96378"
            },
            {
              "name": "https://support.citrix.com/article/CTX220771",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX220771"
            },
            {
              "name": "GLSA-201703-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201703-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2620",
    "datePublished": "2018-07-27T19:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:07.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9922 (GCVE-0-2016-9922)

Vulnerability from cvelistv5

Published

2017-03-27 15:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/94803	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1334398	x_refsource_CONFIRM
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:30.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9922",
    "datePublished": "2017-03-27T15:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:30.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5

Published

2018-07-02 18:00

Modified

2024-08-05 14:02

Severity ?

5.5 (Medium) - CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Summary

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037804	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/95990	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-27	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/02/01/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisory, x_refsource_REDHAT
	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0309.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0344.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisory, x_refsource_REDHAT
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	qemu	display	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:06.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
          },
          {
            "name": "1037804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037804"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "95990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95990"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "GLSA-201702-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-27"
          },
          {
            "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "RHSA-2017:0309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
          },
          {
            "name": "RHSA-2017:0344",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "display",
          "vendor": "qemu",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
        },
        {
          "name": "1037804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037804"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "95990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95990"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "GLSA-201702-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-27"
        },
        {
          "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "RHSA-2017:0309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
        },
        {
          "name": "RHSA-2017:0344",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2615",
    "datePublished": "2018-07-02T18:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:06.484Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9921 (GCVE-0-2016-9921)

Vulnerability from cvelistv5

Published

2016-12-23 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/94803	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.373Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9921",
    "datePublished": "2016-12-23T22:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9907 (GCVE-0-2016-9907)

Vulnerability from cvelistv5

Published

2016-12-23 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in 'usbredir_handle_destroy'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.

References

►

URL

Tags

	http://www.securityfocus.com/bid/94759	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/12/08/3	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "94759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94759"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "[oss-security] 20161208 Re: CVE request Qemu: usb: redirector: memory leakage when destroying",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/08/3"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could occur while destroying the USB redirector in \u0027usbredir_handle_destroy\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "94759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94759"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "[oss-security] 20161208 Re: CVE request Qemu: usb: redirector: memory leakage when destroying",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/08/3"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9907",
    "datePublished": "2016-12-23T22:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5667 (GCVE-0-2017-5667)

Vulnerability from cvelistv5

Published

2017-03-16 15:00

Modified

2024-08-05 15:11

Severity ?

CWE

Summary

The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/30/2	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95885	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/02/12/1	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1417559	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/31/10	mailing-list, x_refsource_MLIST
	http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.396Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170130 CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/30/2"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "95885",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95885"
          },
          {
            "name": "[oss-security] 20170212 Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/12/1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1417559"
          },
          {
            "name": "[oss-security] 20170131 Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/31/10"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170130 CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/30/2"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "95885",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95885"
        },
        {
          "name": "[oss-security] 20170212 Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/12/1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1417559"
        },
        {
          "name": "[oss-security] 20170131 Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/31/10"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5667",
    "datePublished": "2017-03-16T15:00:00",
    "dateReserved": "2017-01-31T00:00:00",
    "dateUpdated": "2024-08-05T15:11:48.396Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5856 (GCVE-0-2017-5856)

Vulnerability from cvelistv5

Published

2017-03-16 15:00

Modified

2024-08-05 15:11

Severity ?

CWE

Summary

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2017/02/01/19	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/95999	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1418342	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/02/02/14	mailing-list, x_refsource_MLIST
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.732Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20170201 CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/19"
          },
          {
            "name": "95999",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95999"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418342"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "[oss-security] 20170202 Re: CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/14"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20170201 CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/19"
        },
        {
          "name": "95999",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95999"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418342"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "[oss-security] 20170202 Re: CVE request Qemu: scsi: megasas: host memory leakage in megasas_handle_dcmd",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/14"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=765a707000e838c30b18d712fe6cb3dd8e0435f3"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5856",
    "datePublished": "2017-03-16T15:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-05T15:11:48.732Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10155 (GCVE-0-2016-10155)

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

CWE

Summary

Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

References

►

URL

Tags

	http://www.securityfocus.com/bid/95770	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/21/4	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/01/20/14	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.765Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95770",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95770"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95770",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95770"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10155",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95770",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95770"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=eb7a20a3616085d46aa6b4b4224e15587ec67e6e",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
            },
            {
              "name": "GLSA-201702-28",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-28"
            },
            {
              "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10155",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-01-20T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.765Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9776 (GCVE-0-2016-9776)

Vulnerability from cvelistv5

Published

2016-12-29 22:00

Modified

2024-08-06 02:59

Severity ?

CWE

Summary

QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/12/02/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/12/02/8	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1400829	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94638	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/02/3"
          },
          {
            "name": "[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/02/8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829"
          },
          {
            "name": "94638",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94638"
          },
          {
            "name": "[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/02/3"
        },
        {
          "name": "[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/02/8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829"
        },
        {
          "name": "94638",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94638"
        },
        {
          "name": "[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9776",
    "datePublished": "2016-12-29T22:00:00",
    "dateReserved": "2016-12-02T00:00:00",
    "dateUpdated": "2024-08-06T02:59:03.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5525 (GCVE-0-2017-5525)

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-05 15:04

Severity ?

CWE

Summary

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2017/01/18/7	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95671	vdb-entry, x_refsource_BID
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/17/19	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:15.030Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20170118 Re: CVE request Qemu: audio: memory leakage in ac97 device",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/18/7"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "95671",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95671"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401"
          },
          {
            "name": "[oss-security] 20170118 CVE request Qemu: audio: memory leakage in ac97 device",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/17/19"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20170118 Re: CVE request Qemu: audio: memory leakage in ac97 device",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/18/7"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "95671",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95671"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=12351a91da97b414eec8cdb09f1d9f41e535a401"
        },
        {
          "name": "[oss-security] 20170118 CVE request Qemu: audio: memory leakage in ac97 device",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/17/19"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5525",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-01-18T00:00:00",
    "dateUpdated": "2024-08-05T15:04:15.030Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5898 (GCVE-0-2017-5898)

Vulnerability from cvelistv5

Published

2017-03-15 19:00

Modified

2024-08-05 15:11

Severity ?

CWE

Summary

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2017/02/07/3	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/bid/96112	vdb-entry, x_refsource_BID
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1419699	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1856	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.967Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2017:0582",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
          },
          {
            "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "SUSE-SU-2017:0570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
          },
          {
            "name": "96112",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96112"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
          },
          {
            "name": "RHSA-2017:1856",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1856"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SU-2017:0582",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
        },
        {
          "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "SUSE-SU-2017:0570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
        },
        {
          "name": "96112",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96112"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
        },
        {
          "name": "RHSA-2017:1856",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1856"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5898",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SU-2017:0582",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"
            },
            {
              "name": "[oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guest",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/07/3"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201702-28",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-28"
            },
            {
              "name": "SUSE-SU-2017:0570",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"
            },
            {
              "name": "96112",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96112"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=c7dfbf322595ded4e70b626bf83158a9f3807c6a",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=c7dfbf322595ded4e70b626bf83158a9f3807c6a"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1419699"
            },
            {
              "name": "RHSA-2017:1856",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1856"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5898",
    "datePublished": "2017-03-15T19:00:00",
    "dateReserved": "2017-02-07T00:00:00",
    "dateUpdated": "2024-08-05T15:11:48.967Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5526 (GCVE-0-2017-5526)

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-05 15:04

Severity ?

CWE

Summary

Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

References

►

URL

Tags

	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/18/8	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/95669	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/01/18/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:15.017Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170118 Re: CVE request Qemu: audio: memory leakage in es1370 device",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/18/8"
          },
          {
            "name": "95669",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95669"
          },
          {
            "name": "[oss-security] 20170118 CVE request Qemu: audio: memory leakage in es1370 device",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/18/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=069eb7b2b8fc47c7cb52e5a4af23ea98d939e3da"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170118 Re: CVE request Qemu: audio: memory leakage in es1370 device",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/18/8"
        },
        {
          "name": "95669",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95669"
        },
        {
          "name": "[oss-security] 20170118 CVE request Qemu: audio: memory leakage in es1370 device",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/18/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5526",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-01-18T00:00:00",
    "dateUpdated": "2024-08-05T15:04:15.017Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:1241-1

Vulnerability from csaf_suse

CVE-2016-9911 (GCVE-0-2016-9911)

Vulnerability from cvelistv5

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5

CVE-2016-9922 (GCVE-0-2016-9922)

Vulnerability from cvelistv5

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5

CVE-2016-9921 (GCVE-0-2016-9921)

Vulnerability from cvelistv5

CVE-2016-9907 (GCVE-0-2016-9907)

Vulnerability from cvelistv5

CVE-2017-5667 (GCVE-0-2017-5667)

Vulnerability from cvelistv5

CVE-2017-5856 (GCVE-0-2017-5856)

Vulnerability from cvelistv5

CVE-2016-10155 (GCVE-0-2016-10155)

Vulnerability from cvelistv5

CVE-2016-9776 (GCVE-0-2016-9776)

Vulnerability from cvelistv5

CVE-2017-5525 (GCVE-0-2017-5525)

Vulnerability from cvelistv5

CVE-2017-5898 (GCVE-0-2017-5898)

Vulnerability from cvelistv5

CVE-2017-5526 (GCVE-0-2017-5526)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature