csaf_suse - suse-su-2017:1774-1

suse-su-2017:1774-1

Vulnerability from csaf_suse

Published

2017-07-04 14:11

Modified

2017-07-04 14:11

Summary

Security update for qemu

Notes

Title of the patch

Security update for qemu

Description of the patch

This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042159). - CVE-2017-8379: Memory leak in the keyboard input event handlers support allowed local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events (bsc#1037334). - CVE-2017-8309: Memory leak in the audio/audio.c allowed remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture (bsc#1037242). - CVE-2017-7493: The VirtFS, host directory sharing via Plan 9 File System(9pfs) support, was vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could have used this flaw to escalate their privileges inside guest (bsc#1039495). - CVE-2017-7377: The v9fs_create and v9fs_lcreate functions in hw/9pfs/9p.c allowed local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid (bsc#1032075). - CVE-2017-8086: A memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c allowed local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable (bsc#1035950). - CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025109) - CVE-2017-5987: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c allowed local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer (bsc#1025311). - CVE-2017-6505: The ohci_service_ed_list function in hw/usb/hcd-ohci.c allowed local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors (bsc#1028184) - CVE-2016-9603: A privileged user within the guest VM could have caused a heap overflow in the device model process, potentially escalating their privileges to that of the device model process (bsc#1028656) - CVE-2017-7718: hw/display/cirrus_vga_rop.h allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions (bsc#1034908) - CVE-2017-7980: An out-of-bounds r/w access issues in the Cirrus CLGD 54xx VGA Emulator support allowed privileged user inside guest to use this flaw to crash the Qemu process resulting in DoS or potentially execute arbitrary code on a host with privileges of Qemu process on the host (bsc#1035406) - CVE-2017-8112: hw/scsi/vmw_pvscsi.c allowed local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count (bsc#1036211). - CVE-2017-9375: The USB xHCI controller emulator support was vulnerable to an infinite recursive call loop issue, which allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#1042800). - CVE-2017-9374: Missing free of 's->ipacket', causes a host memory leak, allowing for DoS (bsc#1043073). - CVE-2017-9373: The IDE AHCI Emulation support was vulnerable to a host memory leakage issue, which allowed a privileged user inside guest to leak host memory resulting in DoS (bsc#1042801). - CVE-2017-8380: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to an out-of-bounds read access issue which allowed a privileged user inside guest to read host memory resulting in DoS (bsc#1037336). - CVE-2016-9602: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper link following issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1020427). - CVE-2017-7471: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper access control issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1034866). - Fix privilege escalation in TCG mode of QEMU. This is not considered a security issue by the upstream project, but is included as additional hardening (bsc#1030624) - Fix potential DoS in virtfs - CVE-2016-10028: The Virtio GPU Device emulator support was vulnerable to an out of bounds memory access issue allowing a guest user to crash the Qemu process instance on a host, resulting in DoS (bsc#1017084, bsc#1016503) - CVE-2016-10029: The Virtio GPU Device emulator support was vulnerable to an OOB read issue allowing a guest user to crash the Qemu process instance resulting in Dos (bsc#1017081, bsc#1016504) - CVE-2017-5579: The 16550A UART serial device emulation support was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021741) - CVE-2017-9503: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a null pointer dereference issue which allowed a privileged user inside guest to crash the Qemu process on the host resulting in DoS (bsc#1043296). This non-security issue was fixed: - Enable MONITOR/MWAIT support for guests (bsc#1031142)

Patchnames

SUSE-SLE-DESKTOP-12-SP2-2017-1102,SUSE-SLE-RPI-12-SP2-2017-1102,SUSE-SLE-SERVER-12-SP2-2017-1102

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for qemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for qemu fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042159).\n- CVE-2017-8379: Memory leak in the keyboard input event handlers support allowed local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events (bsc#1037334).\n- CVE-2017-8309: Memory leak in the audio/audio.c allowed remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture (bsc#1037242).\n- CVE-2017-7493: The VirtFS, host directory sharing via Plan 9 File System(9pfs) support, was vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could have used this flaw to escalate their privileges inside guest (bsc#1039495).\n- CVE-2017-7377: The v9fs_create and v9fs_lcreate functions in hw/9pfs/9p.c allowed local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid (bsc#1032075).\n- CVE-2017-8086: A memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c allowed local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable (bsc#1035950).\n- CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025109)\n- CVE-2017-5987: The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c allowed local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer (bsc#1025311).\n- CVE-2017-6505: The ohci_service_ed_list function in hw/usb/hcd-ohci.c allowed local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors (bsc#1028184)\n- CVE-2016-9603: A privileged user within the guest VM could have caused a heap overflow in the device model process, potentially escalating their privileges to that of the device model process (bsc#1028656)\n- CVE-2017-7718: hw/display/cirrus_vga_rop.h allowed local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions (bsc#1034908)\n- CVE-2017-7980: An out-of-bounds r/w access issues in the Cirrus CLGD 54xx VGA Emulator support allowed privileged user inside guest to use this flaw to crash the Qemu process resulting in DoS or potentially execute arbitrary code on a host with privileges of Qemu process on the host (bsc#1035406)\n- CVE-2017-8112: hw/scsi/vmw_pvscsi.c allowed local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count (bsc#1036211).\n- CVE-2017-9375: The USB xHCI controller emulator support was vulnerable to an infinite recursive call loop issue, which allowed a privileged user inside guest to crash the Qemu process resulting in DoS (bsc#1042800).\n- CVE-2017-9374: Missing free of \u0027s-\u003eipacket\u0027, causes a host memory leak, allowing for DoS (bsc#1043073).\n- CVE-2017-9373: The IDE AHCI Emulation support was vulnerable to a host memory leakage issue, which allowed a privileged user inside guest to leak host memory resulting in DoS (bsc#1042801).\n- CVE-2017-8380: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to an out-of-bounds read access issue which allowed a privileged user inside guest to read host memory resulting in DoS (bsc#1037336).\n- CVE-2016-9602: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper link following issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1020427).\n- CVE-2017-7471: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper access control issue which allowed a privileged user inside guest to access host file system beyond the shared folder and potentially escalating their privileges on a host (bsc#1034866).\n- Fix privilege escalation in TCG mode of QEMU. This is not considered a security issue by the upstream project, but is included as additional hardening (bsc#1030624)\n- Fix potential DoS in virtfs\n- CVE-2016-10028: The Virtio GPU Device emulator support was vulnerable to an out of bounds memory access issue allowing a guest user to crash the Qemu process instance on a host, resulting in DoS (bsc#1017084, bsc#1016503)\n- CVE-2016-10029: The Virtio GPU Device emulator support was vulnerable to an OOB read issue allowing a guest user to crash the Qemu process instance resulting in Dos (bsc#1017081, bsc#1016504)\n- CVE-2017-5579: The 16550A UART serial device emulation support was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1021741)\n- CVE-2017-9503: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a null pointer dereference issue which allowed a privileged user inside guest to crash the Qemu process on the host resulting in DoS (bsc#1043296).\n\nThis non-security issue was fixed:\n\n- Enable MONITOR/MWAIT support for guests (bsc#1031142)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP2-2017-1102,SUSE-SLE-RPI-12-SP2-2017-1102,SUSE-SLE-SERVER-12-SP2-2017-1102",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_1774-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:1774-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20171774-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:1774-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-July/003006.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016503",
        "url": "https://bugzilla.suse.com/1016503"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016504",
        "url": "https://bugzilla.suse.com/1016504"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017081",
        "url": "https://bugzilla.suse.com/1017081"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1017084",
        "url": "https://bugzilla.suse.com/1017084"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1020427",
        "url": "https://bugzilla.suse.com/1020427"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1021741",
        "url": "https://bugzilla.suse.com/1021741"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025109",
        "url": "https://bugzilla.suse.com/1025109"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1025311",
        "url": "https://bugzilla.suse.com/1025311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1028184",
        "url": "https://bugzilla.suse.com/1028184"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1028656",
        "url": "https://bugzilla.suse.com/1028656"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1030624",
        "url": "https://bugzilla.suse.com/1030624"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1031142",
        "url": "https://bugzilla.suse.com/1031142"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1032075",
        "url": "https://bugzilla.suse.com/1032075"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1034866",
        "url": "https://bugzilla.suse.com/1034866"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1034908",
        "url": "https://bugzilla.suse.com/1034908"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1035406",
        "url": "https://bugzilla.suse.com/1035406"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1035950",
        "url": "https://bugzilla.suse.com/1035950"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1036211",
        "url": "https://bugzilla.suse.com/1036211"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1037242",
        "url": "https://bugzilla.suse.com/1037242"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1037334",
        "url": "https://bugzilla.suse.com/1037334"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1037336",
        "url": "https://bugzilla.suse.com/1037336"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1039495",
        "url": "https://bugzilla.suse.com/1039495"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1042159",
        "url": "https://bugzilla.suse.com/1042159"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1042800",
        "url": "https://bugzilla.suse.com/1042800"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1042801",
        "url": "https://bugzilla.suse.com/1042801"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1043073",
        "url": "https://bugzilla.suse.com/1043073"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1043296",
        "url": "https://bugzilla.suse.com/1043296"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10028 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10028/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10029 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10029/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9602 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9602/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9603 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9603/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5579 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5579/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5973 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5973/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5987 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5987/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-6505 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-6505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7377 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7471 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7471/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7493 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7493/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7718 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7718/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7980 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7980/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-8086 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-8086/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-8112 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-8112/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-8309 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-8309/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-8379 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-8379/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-8380 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-8380/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9330 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9373 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9373/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9374 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9374/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9375 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9375/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-9503 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-9503/"
      }
    ],
    "title": "Security update for qemu",
    "tracking": {
      "current_release_date": "2017-07-04T14:11:58Z",
      "generator": {
        "date": "2017-07-04T14:11:58Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:1774-1",
      "initial_release_date": "2017-07-04T14:11:58Z",
      "revision_history": [
        {
          "date": "2017-07-04T14:11:58Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-arm-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-arm-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-arm-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-block-curl-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-block-curl-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-block-rbd-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-block-rbd-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-block-ssh-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-block-ssh-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-guest-agent-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-guest-agent-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-lang-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-lang-2.6.2-41.16.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.6.2-41.16.1.aarch64",
                "product": {
                  "name": "qemu-tools-2.6.2-41.16.1.aarch64",
                  "product_id": "qemu-tools-2.6.2-41.16.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-ipxe-1.0.0-41.16.1.noarch",
                "product": {
                  "name": "qemu-ipxe-1.0.0-41.16.1.noarch",
                  "product_id": "qemu-ipxe-1.0.0-41.16.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-seabios-1.9.1-41.16.1.noarch",
                "product": {
                  "name": "qemu-seabios-1.9.1-41.16.1.noarch",
                  "product_id": "qemu-seabios-1.9.1-41.16.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-sgabios-8-41.16.1.noarch",
                "product": {
                  "name": "qemu-sgabios-8-41.16.1.noarch",
                  "product_id": "qemu-sgabios-8-41.16.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-vgabios-1.9.1-41.16.1.noarch",
                "product": {
                  "name": "qemu-vgabios-1.9.1-41.16.1.noarch",
                  "product_id": "qemu-vgabios-1.9.1-41.16.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-block-curl-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-block-curl-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-block-ssh-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-block-ssh-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-guest-agent-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-guest-agent-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-lang-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-lang-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-ppc-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-ppc-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-ppc-2.6.2-41.16.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.6.2-41.16.1.ppc64le",
                "product": {
                  "name": "qemu-tools-2.6.2-41.16.1.ppc64le",
                  "product_id": "qemu-tools-2.6.2-41.16.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-block-curl-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-block-curl-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-block-ssh-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-block-ssh-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-guest-agent-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-guest-agent-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-kvm-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-kvm-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-lang-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-lang-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-s390-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-s390-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-s390-2.6.2-41.16.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.6.2-41.16.1.s390x",
                "product": {
                  "name": "qemu-tools-2.6.2-41.16.1.s390x",
                  "product_id": "qemu-tools-2.6.2-41.16.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-block-curl-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-block-curl-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-kvm-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-kvm-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-tools-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-tools-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-x86-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-x86-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-x86-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-block-rbd-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-block-rbd-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-block-ssh-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-block-ssh-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-guest-agent-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-guest-agent-2.6.2-41.16.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.6.2-41.16.1.x86_64",
                "product": {
                  "name": "qemu-lang-2.6.2-41.16.1.x86_64",
                  "product_id": "qemu-lang-2.6.2-41.16.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-41.16.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-seabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-41.16.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-x86-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-arm-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-arm-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-rbd-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-41.16.1.noarch as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-arm-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-arm-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-rbd-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-41.16.1.noarch as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-kvm-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-s390-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-seabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-41.16.1.noarch as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-x86-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-arm-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-arm-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-rbd-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-block-ssh-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-41.16.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-kvm-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-lang-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-s390-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-seabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-41.16.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-tools-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.9.1-41.16.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.9.1-41.16.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.6.2-41.16.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        },
        "product_reference": "qemu-x86-2.6.2-41.16.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-10028",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10028"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10028",
          "url": "https://www.suse.com/security/cve/CVE-2016-10028"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017084 for CVE-2016-10028",
          "url": "https://bugzilla.suse.com/1017084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017085 for CVE-2016-10028",
          "url": "https://bugzilla.suse.com/1017085"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1185981 for CVE-2016-10028",
          "url": "https://bugzilla.suse.com/1185981"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10028"
    },
    {
      "cve": "CVE-2016-10029",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10029"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10029",
          "url": "https://www.suse.com/security/cve/CVE-2016-10029"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017081 for CVE-2016-10029",
          "url": "https://bugzilla.suse.com/1017081"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1017082 for CVE-2016-10029",
          "url": "https://bugzilla.suse.com/1017082"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10029"
    },
    {
      "cve": "CVE-2016-9602",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9602"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9602",
          "url": "https://www.suse.com/security/cve/CVE-2016-9602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020427 for CVE-2016-9602",
          "url": "https://bugzilla.suse.com/1020427"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-9602"
    },
    {
      "cve": "CVE-2016-9603",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9603"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9603",
          "url": "https://www.suse.com/security/cve/CVE-2016-9603"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028655 for CVE-2016-9603",
          "url": "https://bugzilla.suse.com/1028655"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028656 for CVE-2016-9603",
          "url": "https://bugzilla.suse.com/1028656"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9603",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9603"
    },
    {
      "cve": "CVE-2017-5579",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5579"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5579",
          "url": "https://www.suse.com/security/cve/CVE-2017-5579"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1021741 for CVE-2017-5579",
          "url": "https://bugzilla.suse.com/1021741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1022627 for CVE-2017-5579",
          "url": "https://bugzilla.suse.com/1022627"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5579"
    },
    {
      "cve": "CVE-2017-5973",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5973"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5973",
          "url": "https://www.suse.com/security/cve/CVE-2017-5973"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025109 for CVE-2017-5973",
          "url": "https://bugzilla.suse.com/1025109"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025188 for CVE-2017-5973",
          "url": "https://bugzilla.suse.com/1025188"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5973"
    },
    {
      "cve": "CVE-2017-5987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5987",
          "url": "https://www.suse.com/security/cve/CVE-2017-5987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1025311 for CVE-2017-5987",
          "url": "https://bugzilla.suse.com/1025311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-5987"
    },
    {
      "cve": "CVE-2017-6505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-6505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-6505",
          "url": "https://www.suse.com/security/cve/CVE-2017-6505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028184 for CVE-2017-6505",
          "url": "https://bugzilla.suse.com/1028184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028235 for CVE-2017-6505",
          "url": "https://bugzilla.suse.com/1028235"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-6505",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-6505"
    },
    {
      "cve": "CVE-2017-7377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7377",
          "url": "https://www.suse.com/security/cve/CVE-2017-7377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1032075 for CVE-2017-7377",
          "url": "https://bugzilla.suse.com/1032075"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-7377"
    },
    {
      "cve": "CVE-2017-7471",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7471"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7471",
          "url": "https://www.suse.com/security/cve/CVE-2017-7471"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1034866 for CVE-2017-7471",
          "url": "https://bugzilla.suse.com/1034866"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1034990 for CVE-2017-7471",
          "url": "https://bugzilla.suse.com/1034990"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7471"
    },
    {
      "cve": "CVE-2017-7493",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7493"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7493",
          "url": "https://www.suse.com/security/cve/CVE-2017-7493"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1039495 for CVE-2017-7493",
          "url": "https://bugzilla.suse.com/1039495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7493"
    },
    {
      "cve": "CVE-2017-7718",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7718"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7718",
          "url": "https://www.suse.com/security/cve/CVE-2017-7718"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1034908 for CVE-2017-7718",
          "url": "https://bugzilla.suse.com/1034908"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1034994 for CVE-2017-7718",
          "url": "https://bugzilla.suse.com/1034994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-7718",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-7718"
    },
    {
      "cve": "CVE-2017-7980",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7980"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7980",
          "url": "https://www.suse.com/security/cve/CVE-2017-7980"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035406 for CVE-2017-7980",
          "url": "https://bugzilla.suse.com/1035406"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035483 for CVE-2017-7980",
          "url": "https://bugzilla.suse.com/1035483"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-7980"
    },
    {
      "cve": "CVE-2017-8086",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-8086"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-8086",
          "url": "https://www.suse.com/security/cve/CVE-2017-8086"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1035950 for CVE-2017-8086",
          "url": "https://bugzilla.suse.com/1035950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-8086"
    },
    {
      "cve": "CVE-2017-8112",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-8112"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-8112",
          "url": "https://www.suse.com/security/cve/CVE-2017-8112"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1036211 for CVE-2017-8112",
          "url": "https://bugzilla.suse.com/1036211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1036470 for CVE-2017-8112",
          "url": "https://bugzilla.suse.com/1036470"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-8112"
    },
    {
      "cve": "CVE-2017-8309",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-8309"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-8309",
          "url": "https://www.suse.com/security/cve/CVE-2017-8309"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037242 for CVE-2017-8309",
          "url": "https://bugzilla.suse.com/1037242"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037243 for CVE-2017-8309",
          "url": "https://bugzilla.suse.com/1037243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-8309",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-8309"
    },
    {
      "cve": "CVE-2017-8379",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-8379"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-8379",
          "url": "https://www.suse.com/security/cve/CVE-2017-8379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037334 for CVE-2017-8379",
          "url": "https://bugzilla.suse.com/1037334"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-8379"
    },
    {
      "cve": "CVE-2017-8380",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-8380"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in the \"megasas_mmio_write\" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-8380",
          "url": "https://www.suse.com/security/cve/CVE-2017-8380"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1037336 for CVE-2017-8380",
          "url": "https://bugzilla.suse.com/1037336"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-8380"
    },
    {
      "cve": "CVE-2017-9330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9330",
          "url": "https://www.suse.com/security/cve/CVE-2017-9330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1042159 for CVE-2017-9330",
          "url": "https://bugzilla.suse.com/1042159"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1042160 for CVE-2017-9330",
          "url": "https://bugzilla.suse.com/1042160"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043157 for CVE-2017-9330",
          "url": "https://bugzilla.suse.com/1043157"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-9330",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-9330"
    },
    {
      "cve": "CVE-2017-9373",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9373"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9373",
          "url": "https://www.suse.com/security/cve/CVE-2017-9373"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1042801 for CVE-2017-9373",
          "url": "https://bugzilla.suse.com/1042801"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-9373"
    },
    {
      "cve": "CVE-2017-9374",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9374"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9374",
          "url": "https://www.suse.com/security/cve/CVE-2017-9374"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043073 for CVE-2017-9374",
          "url": "https://bugzilla.suse.com/1043073"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043074 for CVE-2017-9374",
          "url": "https://bugzilla.suse.com/1043074"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-9374"
    },
    {
      "cve": "CVE-2017-9375",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9375"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9375",
          "url": "https://www.suse.com/security/cve/CVE-2017-9375"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1042800 for CVE-2017-9375",
          "url": "https://bugzilla.suse.com/1042800"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-9375"
    },
    {
      "cve": "CVE-2017-9503",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-9503"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-9503",
          "url": "https://www.suse.com/security/cve/CVE-2017-9503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043296 for CVE-2017-9503",
          "url": "https://bugzilla.suse.com/1043296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043297 for CVE-2017-9503",
          "url": "https://bugzilla.suse.com/1043297"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043312 for CVE-2017-9503",
          "url": "https://bugzilla.suse.com/1043312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-arm-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-curl-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-rbd-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-block-ssh-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-guest-agent-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ipxe-1.0.0-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-kvm-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-lang-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-ppc-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-s390-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-seabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-sgabios-8-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-tools-2.6.2-41.16.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-vgabios-1.9.1-41.16.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:qemu-x86-2.6.2-41.16.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-07-04T14:11:58Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-9503"
    }
  ]
}

CVE-2016-9602 (GCVE-0-2016-9602)

Vulnerability from cvelistv5

Published

2018-04-26 19:00

Modified

2024-08-06 02:59

Severity ?

7.6 (High) - CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-59

Summary

Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1037604	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/17/12	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95461	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	unspecified	Qemu	Version: qemu 2.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.165Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20170220 [PATCH 00/29] 9pfs: local: fix vulnerability to symlink attacks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html"
          },
          {
            "name": "1037604",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037604"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602"
          },
          {
            "name": "[oss-security] 20170117 CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/17/12"
          },
          {
            "name": "[qemu-devel] 20170130 [PATCH RFC 00/36] 9pfs: local: fix vulnerability to symlink attacks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "95461",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95461"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu",
          "vendor": "unspecified",
          "versions": [
            {
              "status": "affected",
              "version": "qemu 2.9"
            }
          ]
        }
      ],
      "datePublic": "2017-01-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20170220 [PATCH 00/29] 9pfs: local: fix vulnerability to symlink attacks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html"
        },
        {
          "name": "1037604",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037604"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602"
        },
        {
          "name": "[oss-security] 20170117 CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/17/12"
        },
        {
          "name": "[qemu-devel] 20170130 [PATCH RFC 00/36] 9pfs: local: fix vulnerability to symlink attacks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "95461",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95461"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-9602",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "qemu 2.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": ""
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "7.6/CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "6.5/AV:A/AC:H/Au:S/C:C/I:C/A:C",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-59"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[qemu-devel] 20170220 [PATCH 00/29] 9pfs: local: fix vulnerability to symlink attacks",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04347.html"
            },
            {
              "name": "1037604",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037604"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9602"
            },
            {
              "name": "[oss-security] 20170117 CVE-2016-9602 Qemu: 9p: virtfs allows guest to access host filesystem",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/17/12"
            },
            {
              "name": "[qemu-devel] 20170130 [PATCH RFC 00/36] 9pfs: local: fix vulnerability to symlink attacks",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06225.html"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "95461",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95461"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9602",
    "datePublished": "2018-04-26T19:00:00",
    "dateReserved": "2016-11-23T00:00:00",
    "dateUpdated": "2024-08-06T02:59:03.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-6505 (GCVE-0-2017-6505)

Vulnerability from cvelistv5

Published

2017-03-15 14:00

Modified

2024-08-05 15:33

Severity ?

CWE

Summary

The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb	x_refsource_CONFIRM
	https://bugzilla.redhat.com/show_bug.cgi?id=1429432	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/96611	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2017/03/06/6	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:33:19.094Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1429432"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "96611",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96611"
          },
          {
            "name": "[oss-security] 20170306 CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/03/06/6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1429432"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "96611",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96611"
        },
        {
          "name": "[oss-security] 20170306 CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/03/06/6"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-6505",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commitdiff;h=95ed56939eb2eaa4e2f349fe6dcd13ca4edfd8fb"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1429432",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1429432"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "96611",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96611"
            },
            {
              "name": "[oss-security] 20170306 CVE-2017-6505 Qemu: usb: an infinite loop issue in ohci_service_ed_list",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/03/06/6"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-6505",
    "datePublished": "2017-03-15T14:00:00",
    "dateReserved": "2017-03-06T00:00:00",
    "dateUpdated": "2024-08-05T15:33:19.094Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-9374 (GCVE-0-2017-9374)

Vulnerability from cvelistv5

Published

2017-06-16 22:00

Modified

2024-08-05 17:02

Severity ?

CWE

Summary

Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.

References

►

URL

Tags

	http://www.debian.org/security/2017/dsa-3920	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2017/06/06/3	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1459132	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/98905	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:02:44.430Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3920",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3920"
          },
          {
            "name": "[oss-security] 20170606 CVE-2017-9374 Qemu: usb: ehci host memory leakage during hotunplug",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/06/06/3"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459132"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "98905",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98905"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-06-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3920",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3920"
        },
        {
          "name": "[oss-security] 20170606 CVE-2017-9374 Qemu: usb: ehci host memory leakage during hotunplug",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/06/06/3"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459132"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "98905",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98905"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9374",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3920",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3920"
            },
            {
              "name": "[oss-security] 20170606 CVE-2017-9374 Qemu: usb: ehci host memory leakage during hotunplug",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/06/06/3"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1459132",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459132"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=d710e1e7bd3d5bfc26b631f02ae87901ebe646b0"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            },
            {
              "name": "98905",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98905"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9374",
    "datePublished": "2017-06-16T22:00:00",
    "dateReserved": "2017-06-02T00:00:00",
    "dateUpdated": "2024-08-05T17:02:44.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8380 (GCVE-0-2017-8380)

Vulnerability from cvelistv5

Published

2017-08-28 15:00

Modified

2024-08-05 16:34

Severity ?

CWE

Summary

Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.

References

►

URL

Tags

	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/98303	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:34:22.717Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html"
          },
          {
            "name": "98303",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98303"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the \"megasas_mmio_write\" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-29T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html"
        },
        {
          "name": "98303",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98303"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the \"megasas_mmio_write\" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html",
              "refsource": "CONFIRM",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.html"
            },
            {
              "name": "98303",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98303"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8380",
    "datePublished": "2017-08-28T15:00:00",
    "dateReserved": "2017-04-30T00:00:00",
    "dateUpdated": "2024-08-05T16:34:22.717Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10029 (GCVE-0-2016-10029)

Vulnerability from cvelistv5

Published

2017-02-27 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts.

References

►

URL

Tags

	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=acfc4846508a02cc4c83aa27799fd7	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/12/20/2	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1037526	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/94978	vdb-entry, x_refsource_BID
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=2fe760554eb3769d70f608a158474f	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/12/22/15	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.894Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=acfc4846508a02cc4c83aa27799fd7"
          },
          {
            "name": "[oss-security] 20161220 CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/20/2"
          },
          {
            "name": "1037526",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037526"
          },
          {
            "name": "94978",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94978"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=2fe760554eb3769d70f608a158474f"
          },
          {
            "name": "[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/22/15"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a scanout id in a VIRTIO_GPU_CMD_SET_SCANOUT command larger than num_scanouts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-02-27T21:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=acfc4846508a02cc4c83aa27799fd7"
        },
        {
          "name": "[oss-security] 20161220 CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/20/2"
        },
        {
          "name": "1037526",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037526"
        },
        {
          "name": "94978",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94978"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=2fe760554eb3769d70f608a158474f"
        },
        {
          "name": "[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu: out of bounds read in virtio_gpu_set_scanout",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/22/15"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-10029",
    "datePublished": "2017-02-27T22:00:00",
    "dateReserved": "2016-12-22T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7718 (GCVE-0-2017-7718)

Vulnerability from cvelistv5

Published

2017-04-20 17:00

Modified

2024-08-05 16:12

Severity ?

CWE

Summary

hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.

References

►

URL

Tags

	http://www.securityfocus.com/bid/97957	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:0983	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0982	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1443441	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:1430	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:1206	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1431	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0984	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0988	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1441	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2017/04/19/4	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:0981	vendor-advisory, x_refsource_REDHAT
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:0980	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1205	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.145Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "97957",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97957"
          },
          {
            "name": "RHSA-2017:0983",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0983"
          },
          {
            "name": "RHSA-2017:0982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0982"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1430"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "RHSA-2017:1206",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1206"
          },
          {
            "name": "RHSA-2017:1431",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1431"
          },
          {
            "name": "RHSA-2017:0984",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0984"
          },
          {
            "name": "RHSA-2017:0988",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0988"
          },
          {
            "name": "RHSA-2017:1441",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1441"
          },
          {
            "name": "[oss-security] 20170419 CVE-2017-7718 Qemu: display: cirrus: OOB read access issue",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/19/4"
          },
          {
            "name": "RHSA-2017:0981",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0981"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904"
          },
          {
            "name": "RHSA-2017:0980",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0980"
          },
          {
            "name": "RHSA-2017:1205",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1205"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "97957",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97957"
        },
        {
          "name": "RHSA-2017:0983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0983"
        },
        {
          "name": "RHSA-2017:0982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0982"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1430"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "RHSA-2017:1206",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1206"
        },
        {
          "name": "RHSA-2017:1431",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1431"
        },
        {
          "name": "RHSA-2017:0984",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0984"
        },
        {
          "name": "RHSA-2017:0988",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0988"
        },
        {
          "name": "RHSA-2017:1441",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1441"
        },
        {
          "name": "[oss-security] 20170419 CVE-2017-7718 Qemu: display: cirrus: OOB read access issue",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/19/4"
        },
        {
          "name": "RHSA-2017:0981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0981"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=215902d7b6fb50c6fc216fc74f770858278ed904"
        },
        {
          "name": "RHSA-2017:0980",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0980"
        },
        {
          "name": "RHSA-2017:1205",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1205"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7718",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "97957",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97957"
            },
            {
              "name": "RHSA-2017:0983",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0983"
            },
            {
              "name": "RHSA-2017:0982",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0982"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443441"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:1430",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1430"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "RHSA-2017:1206",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1206"
            },
            {
              "name": "RHSA-2017:1431",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1431"
            },
            {
              "name": "RHSA-2017:0984",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0984"
            },
            {
              "name": "RHSA-2017:0988",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0988"
            },
            {
              "name": "RHSA-2017:1441",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1441"
            },
            {
              "name": "[oss-security] 20170419 CVE-2017-7718 Qemu: display: cirrus: OOB read access issue",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/19/4"
            },
            {
              "name": "RHSA-2017:0981",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0981"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=215902d7b6fb50c6fc216fc74f770858278ed904",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=215902d7b6fb50c6fc216fc74f770858278ed904"
            },
            {
              "name": "RHSA-2017:0980",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0980"
            },
            {
              "name": "RHSA-2017:1205",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1205"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7718",
    "datePublished": "2017-04-20T17:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.145Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-9330 (GCVE-0-2017-9330)

Vulnerability from cvelistv5

Published

2017-06-08 16:00

Modified

2024-08-05 17:02

Severity ?

CWE

Summary

QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.

References

►

URL

Tags

	http://www.debian.org/security/2017/dsa-3920	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/98779	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/06/01/3	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1457697	x_refsource_CONFIRM
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:02:44.342Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3920",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3920"
          },
          {
            "name": "98779",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98779"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "[oss-security] 20170601 CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect return value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/06/01/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457697"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3920",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3920"
        },
        {
          "name": "98779",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98779"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "[oss-security] 20170601 CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect return value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/06/01/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457697"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=26f670a244982335cc08943fb1ec099a2c81e42d"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9330",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3920",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3920"
            },
            {
              "name": "98779",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98779"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "[oss-security] 20170601 CVE-2017-9330 Qemu: usb: ohci: infinite loop due to incorrect return value",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/06/01/3"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1457697",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457697"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=26f670a244982335cc08943fb1ec099a2c81e42d",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=26f670a244982335cc08943fb1ec099a2c81e42d"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9330",
    "datePublished": "2017-06-08T16:00:00",
    "dateReserved": "2017-05-31T00:00:00",
    "dateUpdated": "2024-08-05T17:02:44.342Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8309 (GCVE-0-2017-8309)

Vulnerability from cvelistv5

Published

2017-05-23 03:56

Modified

2024-08-05 16:34

Severity ?

CWE

Summary

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/98302	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:34:22.556Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "98302",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98302"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[qemu-devel] 20170428 [PATCH] audio: release capture buffers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "98302",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98302"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[qemu-devel] 20170428 [PATCH] audio: release capture buffers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8309",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "98302",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98302"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            },
            {
              "name": "[qemu-devel] 20170428 [PATCH] audio: release capture buffers",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8309",
    "datePublished": "2017-05-23T03:56:00",
    "dateReserved": "2017-04-28T00:00:00",
    "dateUpdated": "2024-08-05T16:34:22.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-9375 (GCVE-0-2017-9375)

Vulnerability from cvelistv5

Published

2017-06-16 22:00

Modified

2024-08-05 17:02

Severity ?

CWE

Summary

QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing.

References

►

URL

Tags

	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/98915	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1458744	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3991	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2017/06/05/2	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:02:44.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c"
          },
          {
            "name": "98915",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98915"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458744"
          },
          {
            "name": "DSA-3991",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3991"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "[oss-security] 20170605 CVE-2017-9375 Qemu: usb: xhci infinite recursive call via xhci_kick_ep",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/06/05/2"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-06-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-09-20T10:06:12",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=96d87bdda3919bb16f754b3d3fd1227e1f38f13c"
        },
        {
          "name": "98915",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98915"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458744"
        },
        {
          "name": "DSA-3991",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3991"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "[oss-security] 20170605 CVE-2017-9375 Qemu: usb: xhci infinite recursive call via xhci_kick_ep",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/06/05/2"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9375",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service (infinite recursive call) via vectors involving control transfer descriptors sequencing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=96d87bdda3919bb16f754b3d3fd1227e1f38f13c",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=96d87bdda3919bb16f754b3d3fd1227e1f38f13c"
            },
            {
              "name": "98915",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98915"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1458744",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458744"
            },
            {
              "name": "DSA-3991",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3991"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "[oss-security] 20170605 CVE-2017-9375 Qemu: usb: xhci infinite recursive call via xhci_kick_ep",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/06/05/2"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            },
            {
              "name": "[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9375",
    "datePublished": "2017-06-16T22:00:00",
    "dateReserved": "2017-06-02T00:00:00",
    "dateUpdated": "2024-08-05T17:02:44.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5973 (GCVE-0-2017-5973)

Vulnerability from cvelistv5

Published

2017-03-27 15:00

Modified

2024-08-05 15:18

Severity ?

CWE

Summary

The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1421626	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/02/13/11	mailing-list, x_refsource_MLIST
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96220	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
          },
          {
            "name": "96220",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96220"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
        },
        {
          "name": "96220",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96220"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5973",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[qemu-devel] 20170206 [PATCH] xhci: apply limits to loops",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg01101.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421626"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[oss-security] 20170214 CVE-2017-5973 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/13/11"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=f89b60f6e5fee3923bedf80e82b4e5efc1bb156b"
            },
            {
              "name": "96220",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96220"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5973",
    "datePublished": "2017-03-27T15:00:00",
    "dateReserved": "2017-02-13T00:00:00",
    "dateUpdated": "2024-08-05T15:18:49.263Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8086 (GCVE-0-2017-8086)

Vulnerability from cvelistv5

Published

2017-05-02 14:00

Modified

2024-08-05 16:27

Severity ?

CWE

Summary

Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2017/04/25/5	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1444781	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/98012	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:27:21.913Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20170425 CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/25/5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444781"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "[qemu-devel] 20170410 [PULL] 9pfs: xattr: fix memory leak in v9fs_list_xattr",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html"
          },
          {
            "name": "98012",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20170425 CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/25/5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444781"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "[qemu-devel] 20170410 [PULL] 9pfs: xattr: fix memory leak in v9fs_list_xattr",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html"
        },
        {
          "name": "98012",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ffcdef4277a91af15a3c09f7d16af072c29f3f2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8086",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (memory consumption) via vectors involving the orig_value variable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20170425 CVE-2017-8086 Qemu: 9pfs: host memory leakage via v9pfs_list_xattr",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/25/5"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1444781",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1444781"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "[qemu-devel] 20170410 [PULL] 9pfs: xattr: fix memory leak in v9fs_list_xattr",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg01636.html"
            },
            {
              "name": "98012",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98012"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=4ffcdef4277a91af15a3c09f7d16af072c29f3f2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8086",
    "datePublished": "2017-05-02T14:00:00",
    "dateReserved": "2017-04-24T00:00:00",
    "dateUpdated": "2024-08-05T16:27:21.913Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5579 (GCVE-0-2017-5579)

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-05 15:04

Severity ?

CWE

Summary

Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/24/8	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/95780	vdb-entry, x_refsource_BID
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/25/3	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:15.331Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170124 CVE request Qemu: serial: host memory leakage in 16550A UART emulation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/24/8"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "95780",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95780"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b"
          },
          {
            "name": "[oss-security] 20170125 Re: CVE request Qemu: serial: host memory leakage in 16550A UART emulation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/25/3"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170124 CVE request Qemu: serial: host memory leakage in 16550A UART emulation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/24/8"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "95780",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95780"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=8409dc884a201bf74b30a9d232b6bbdd00cb7e2b"
        },
        {
          "name": "[oss-security] 20170125 Re: CVE request Qemu: serial: host memory leakage in 16550A UART emulation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/25/3"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-5579",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-01-25T00:00:00",
    "dateUpdated": "2024-08-05T15:04:15.331Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5987 (GCVE-0-2017-5987)

Vulnerability from cvelistv5

Published

2017-03-20 16:00

Modified

2024-08-05 15:18

Severity ?

CWE

Summary

The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96263	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/02/14/8	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1421995	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.365Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96263",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96263"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e"
          },
          {
            "name": "[oss-security] 20170214 CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/14/8"
          },
          {
            "name": "[qemu-devel] 20170213 Re: [Qemu-devel] [PATCH v3 1/4] sd: sdhci: check transfer mode register in multi block transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421995"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "96263",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96263"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e"
        },
        {
          "name": "[oss-security] 20170214 CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/14/8"
        },
        {
          "name": "[qemu-devel] 20170213 Re: [Qemu-devel] [PATCH v3 1/4] sd: sdhci: check transfer mode register in multi block transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421995"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-5987",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96263",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96263"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e"
            },
            {
              "name": "[oss-security] 20170214 CVE-2017-5987 Qemu: sd: infinite loop issue in multi block transfers",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/14/8"
            },
            {
              "name": "[qemu-devel] 20170213 Re: [Qemu-devel] [PATCH v3 1/4] sd: sdhci: check transfer mode register in multi block transfer",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1421995",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421995"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-5987",
    "datePublished": "2017-03-20T16:00:00",
    "dateReserved": "2017-02-14T00:00:00",
    "dateUpdated": "2024-08-05T15:18:49.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7471 (GCVE-0-2017-7471)

Vulnerability from cvelistv5

Published

2018-07-09 14:00

Modified

2024-08-05 16:04

Severity ?

CWE

Summary

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.

References

►

URL

Tags

	https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/97970	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/04/19/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.568Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "97970",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97970"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471"
          },
          {
            "name": "[oss-security] 20170419 CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/19/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-10T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9c6b899f7a46893ab3b671e341a2234e9c0c060e"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "97970",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97970"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7471"
        },
        {
          "name": "[oss-security] 20170419 CVE-2017-7471 Qemu: 9p: virtfs allows guest to change filesystem attributes on host",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/19/2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7471",
    "datePublished": "2018-07-09T14:00:00",
    "dateReserved": "2017-04-05T00:00:00",
    "dateUpdated": "2024-08-05T16:04:11.568Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7493 (GCVE-0-2017-7493)

Vulnerability from cvelistv5

Published

2017-05-17 15:00

Modified

2024-08-05 16:04

Severity ?

CWE

Improper access control issue

Summary

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/98574	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1451709	x_refsource_CONFIRM
	http://seclists.org/oss-sec/2017/q2/278	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	QEMU	qemu	Version: 2.7.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:04:11.894Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "98574",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98574"
          },
          {
            "name": "[qemu-devel] 20170516 [PULL] 9pfs: local: forbid client access to metadata (CVE-2017-7493)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1451709"
          },
          {
            "name": "[oss-security] 20170517 CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://seclists.org/oss-sec/2017/q2/278"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "qemu",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.7.4"
            }
          ]
        }
      ],
      "datePublic": "2017-05-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper access control issue",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "98574",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98574"
        },
        {
          "name": "[qemu-devel] 20170516 [PULL] 9pfs: local: forbid client access to metadata (CVE-2017-7493)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-05/msg03663.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1451709"
        },
        {
          "name": "[oss-security] 20170517 CVE-2017-7493 Qemu: 9pfs: guest privilege escalation in virtfs mapped-file mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://seclists.org/oss-sec/2017/q2/278"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-7493",
    "datePublished": "2017-05-17T15:00:00",
    "dateReserved": "2017-04-05T00:00:00",
    "dateUpdated": "2024-08-05T16:04:11.894Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8379 (GCVE-0-2017-8379)

Vulnerability from cvelistv5

Published

2017-05-23 03:56

Modified

2024-08-05 16:34

Severity ?

CWE

Summary

Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/05/03/2	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/98277	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:34:22.642Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[qemu-devel] 20170428 [PATCH] input: limit kbd queue depth",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "[oss-security] 20170503 CVE-2017-8379 Qemu: input: host memory lekage via keyboard",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/05/03/2"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "98277",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98277"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[qemu-devel] 20170428 [PATCH] input: limit kbd queue depth",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "[oss-security] 20170503 CVE-2017-8379 Qemu: input: host memory lekage via keyboard",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/05/03/2"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "98277",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98277"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8379",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) by rapidly generating large keyboard events."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "[qemu-devel] 20170428 [PATCH] input: limit kbd queue depth",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "[oss-security] 20170503 CVE-2017-8379 Qemu: input: host memory lekage via keyboard",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/05/03/2"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            },
            {
              "name": "98277",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98277"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8379",
    "datePublished": "2017-05-23T03:56:00",
    "dateReserved": "2017-04-30T00:00:00",
    "dateUpdated": "2024-08-05T16:34:22.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-9503 (GCVE-0-2017-9503)

Vulnerability from cvelistv5

Published

2017-06-16 22:00

Modified

2024-08-05 17:11

Severity ?

CWE

Summary

QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/06/08/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/99010	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1459477	x_refsource_CONFIRM
	https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:11:02.324Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170608 CVE-2017-9503 Qemu: scsi: null pointer dereference while processing megasas command",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/06/08/1"
          },
          {
            "name": "99010",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99010"
          },
          {
            "name": "[qemu-devel] 20170606 [PATCH 7/7] megasas: always store SCSIRequest* into Megasas",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459477"
          },
          {
            "name": "[qemu-devel] 20170606 [PATCH 4/7] megasas: do not read DCMD opcode more than once",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html"
          },
          {
            "name": "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-06-06T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-26T13:06:05",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170608 CVE-2017-9503 Qemu: scsi: null pointer dereference while processing megasas command",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/06/08/1"
        },
        {
          "name": "99010",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99010"
        },
        {
          "name": "[qemu-devel] 20170606 [PATCH 7/7] megasas: always store SCSIRequest* into Megasas",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459477"
        },
        {
          "name": "[qemu-devel] 20170606 [PATCH 4/7] megasas: do not read DCMD opcode more than once",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html"
        },
        {
          "name": "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9503",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "[oss-security] 20170608 CVE-2017-9503 Qemu: scsi: null pointer dereference while processing megasas command",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/06/08/1"
            },
            {
              "name": "99010",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99010"
            },
            {
              "name": "[qemu-devel] 20170606 [PATCH 7/7] megasas: always store SCSIRequest* into Megasas",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1459477",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1459477"
            },
            {
              "name": "[qemu-devel] 20170606 [PATCH 4/7] megasas: do not read DCMD opcode more than once",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html"
            },
            {
              "name": "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9503",
    "datePublished": "2017-06-16T22:00:00",
    "dateReserved": "2017-06-07T00:00:00",
    "dateUpdated": "2024-08-05T17:11:02.324Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-9373 (GCVE-0-2017-9373)

Vulnerability from cvelistv5

Published

2017-06-16 22:00

Modified

2024-08-05 17:02

Severity ?

CWE

Summary

Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device.

References

►

URL

Tags

	http://www.debian.org/security/2017/dsa-3920	vendor-advisory, x_refsource_DEBIAN
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/98921	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1458270	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/06/05/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:02:44.406Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-3920",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3920"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "98921",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98921"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458270"
          },
          {
            "name": "[oss-security] 20170605 CVE-2017-9373 Qemu: ide: ahci host memory leakage during hotunplug",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/06/05/1"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-06-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-3920",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3920"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d68f0f778e7f4fbd674627274267f269e40f0b04"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "98921",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98921"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458270"
        },
        {
          "name": "[oss-security] 20170605 CVE-2017-9373 Qemu: ide: ahci host memory leakage during hotunplug",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/06/05/1"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-9373",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the AHCI device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-3920",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3920"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=d68f0f778e7f4fbd674627274267f269e40f0b04",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=d68f0f778e7f4fbd674627274267f269e40f0b04"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "98921",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98921"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1458270",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1458270"
            },
            {
              "name": "[oss-security] 20170605 CVE-2017-9373 Qemu: ide: ahci host memory leakage during hotunplug",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/06/05/1"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-9373",
    "datePublished": "2017-06-16T22:00:00",
    "dateReserved": "2017-06-02T00:00:00",
    "dateUpdated": "2024-08-05T17:02:44.406Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7980 (GCVE-0-2017-7980)

Vulnerability from cvelistv5

Published

2017-07-25 14:00

Modified

2024-08-05 16:19

Severity ?

CWE

Summary

Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2017:0983	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2017/04/21/1	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:0982	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:1430	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://ubuntu.com/usn/usn-3289-1	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2017:1206	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/97955	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/102129	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:0984	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0988	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1441	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1430056	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:0981	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0980	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1205	vendor-advisory, x_refsource_REDHAT
	https://support.citrix.com/article/CTX230138	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:19:29.573Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0983",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0983"
          },
          {
            "name": "[oss-security] 20170421 CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/21/1"
          },
          {
            "name": "RHSA-2017:0982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0982"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:1430",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1430"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "USN-3289-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://ubuntu.com/usn/usn-3289-1"
          },
          {
            "name": "RHSA-2017:1206",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1206"
          },
          {
            "name": "97955",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97955"
          },
          {
            "name": "102129",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102129"
          },
          {
            "name": "RHSA-2017:0984",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0984"
          },
          {
            "name": "RHSA-2017:0988",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0988"
          },
          {
            "name": "RHSA-2017:1441",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056"
          },
          {
            "name": "RHSA-2017:0981",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0981"
          },
          {
            "name": "RHSA-2017:0980",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0980"
          },
          {
            "name": "RHSA-2017:1205",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1205"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX230138"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2017:0983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0983"
        },
        {
          "name": "[oss-security] 20170421 CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/21/1"
        },
        {
          "name": "RHSA-2017:0982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0982"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:1430",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1430"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "USN-3289-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://ubuntu.com/usn/usn-3289-1"
        },
        {
          "name": "RHSA-2017:1206",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1206"
        },
        {
          "name": "97955",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97955"
        },
        {
          "name": "102129",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102129"
        },
        {
          "name": "RHSA-2017:0984",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0984"
        },
        {
          "name": "RHSA-2017:0988",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0988"
        },
        {
          "name": "RHSA-2017:1441",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056"
        },
        {
          "name": "RHSA-2017:0981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0981"
        },
        {
          "name": "RHSA-2017:0980",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0980"
        },
        {
          "name": "RHSA-2017:1205",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1205"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX230138"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7980",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0983",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0983"
            },
            {
              "name": "[oss-security] 20170421 CVE-2017-7980 Qemu: display: cirrus: OOB r/w access issues in bitblt routines",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/21/1"
            },
            {
              "name": "RHSA-2017:0982",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0982"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:1430",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1430"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "USN-3289-1",
              "refsource": "UBUNTU",
              "url": "http://ubuntu.com/usn/usn-3289-1"
            },
            {
              "name": "RHSA-2017:1206",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1206"
            },
            {
              "name": "97955",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97955"
            },
            {
              "name": "102129",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102129"
            },
            {
              "name": "RHSA-2017:0984",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0984"
            },
            {
              "name": "RHSA-2017:0988",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0988"
            },
            {
              "name": "RHSA-2017:1441",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1441"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1430056"
            },
            {
              "name": "RHSA-2017:0981",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0981"
            },
            {
              "name": "RHSA-2017:0980",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0980"
            },
            {
              "name": "RHSA-2017:1205",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1205"
            },
            {
              "name": "https://support.citrix.com/article/CTX230138",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX230138"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7980",
    "datePublished": "2017-07-25T14:00:00",
    "dateReserved": "2017-04-20T00:00:00",
    "dateUpdated": "2024-08-05T16:19:29.573Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-7377 (GCVE-0-2017-7377)

Vulnerability from cvelistv5

Published

2017-04-10 15:00

Modified

2024-08-05 15:56

Severity ?

CWE

Summary

The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/04/03/2	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.redhat.com/show_bug.cgi?id=1437871	x_refsource_CONFIRM
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e	x_refsource_CONFIRM
	https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/97319	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:56:36.459Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170403 CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/03/2"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1437871"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e"
          },
          {
            "name": "[qemu-devel] 20170328 [PULL 1/2] 9pfs: fix file descriptor leak",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html"
          },
          {
            "name": "97319",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97319"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-03-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170403 CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/03/2"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1437871"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e"
        },
        {
          "name": "[qemu-devel] 20170328 [PULL 1/2] 9pfs: fix file descriptor leak",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html"
        },
        {
          "name": "97319",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97319"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-7377",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "[oss-security] 20170403 CVE-2017-7377 Qemu: 9pfs: host memory leakage via v9fs_create",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/03/2"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1437871",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1437871"
            },
            {
              "name": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e",
              "refsource": "CONFIRM",
              "url": "http://git.qemu-project.org/?p=qemu.git;a=commit;h=d63fb193e71644a073b77ff5ac6f1216f2f6cf6e"
            },
            {
              "name": "[qemu-devel] 20170328 [PULL 1/2] 9pfs: fix file descriptor leak",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-03/msg05449.html"
            },
            {
              "name": "97319",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97319"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-7377",
    "datePublished": "2017-04-10T15:00:00",
    "dateReserved": "2017-03-31T00:00:00",
    "dateUpdated": "2024-08-05T15:56:36.459Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10028 (GCVE-0-2016-10028)

Vulnerability from cvelistv5

Published

2017-02-27 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.

References

►

URL

Tags

	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=abd7f08b2353f43274b785db8c7224f082ef4d31	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037525	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/94981	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/12/20/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/12/22/14	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.983Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=abd7f08b2353f43274b785db8c7224f082ef4d31"
          },
          {
            "name": "1037525",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037525"
          },
          {
            "name": "94981",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94981"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "[qemu-devel] 20161214 [PATCH] display: virtio-gpu-3d: check virgl capabilities max_size",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html"
          },
          {
            "name": "[oss-security] 20161220 CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/20/1"
          },
          {
            "name": "[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/22/14"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=abd7f08b2353f43274b785db8c7224f082ef4d31"
        },
        {
          "name": "1037525",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037525"
        },
        {
          "name": "94981",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94981"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "[qemu-devel] 20161214 [PATCH] display: virtio-gpu-3d: check virgl capabilities max_size",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg01903.html"
        },
        {
          "name": "[oss-security] 20161220 CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/20/1"
        },
        {
          "name": "[oss-security] 20161222 Re: CVE request Qemu: display: virtio-gpu-3d: OOB access while reading virgl capabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/22/14"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-10028",
    "datePublished": "2017-02-27T22:00:00",
    "dateReserved": "2016-12-22T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9603 (GCVE-0-2016-9603)

Vulnerability from cvelistv5

Published

2018-07-27 21:00

Modified

2024-08-06 02:59

Severity ?

5.5 (Medium) - CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-122

Summary

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96893	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:0983	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0982	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:1206	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1038023	vdb-entry, x_refsource_SECTRACK
	https://support.citrix.com/article/CTX221578	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:0985	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0987	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0984	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:0988	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1441	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:0981	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:0980	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1205	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	QEMU	Qemu:	Version: 2.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:02.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96893",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96893"
          },
          {
            "name": "RHSA-2017:0983",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0983"
          },
          {
            "name": "RHSA-2017:0982",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0982"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "RHSA-2017:1206",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1206"
          },
          {
            "name": "1038023",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038023"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX221578"
          },
          {
            "name": "RHSA-2017:0985",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0985"
          },
          {
            "name": "RHSA-2017:0987",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0987"
          },
          {
            "name": "RHSA-2017:0984",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0984"
          },
          {
            "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
          },
          {
            "name": "RHSA-2017:0988",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0988"
          },
          {
            "name": "RHSA-2017:1441",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1441"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603"
          },
          {
            "name": "RHSA-2017:0981",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0981"
          },
          {
            "name": "RHSA-2017:0980",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0980"
          },
          {
            "name": "RHSA-2017:1205",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1205"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu:",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.9"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "96893",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96893"
        },
        {
          "name": "RHSA-2017:0983",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0983"
        },
        {
          "name": "RHSA-2017:0982",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0982"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "RHSA-2017:1206",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1206"
        },
        {
          "name": "1038023",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038023"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX221578"
        },
        {
          "name": "RHSA-2017:0985",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0985"
        },
        {
          "name": "RHSA-2017:0987",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0987"
        },
        {
          "name": "RHSA-2017:0984",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0984"
        },
        {
          "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
        },
        {
          "name": "RHSA-2017:0988",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0988"
        },
        {
          "name": "RHSA-2017:1441",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1441"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603"
        },
        {
          "name": "RHSA-2017:0981",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0981"
        },
        {
          "name": "RHSA-2017:0980",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0980"
        },
        {
          "name": "RHSA-2017:1205",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1205"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-9603",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu:",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A heap buffer overflow flaw was found in QEMU\u0027s Cirrus CLGD 54xx VGA emulator\u0027s VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96893",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96893"
            },
            {
              "name": "RHSA-2017:0983",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0983"
            },
            {
              "name": "RHSA-2017:0982",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0982"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "RHSA-2017:1206",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1206"
            },
            {
              "name": "1038023",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038023"
            },
            {
              "name": "https://support.citrix.com/article/CTX221578",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX221578"
            },
            {
              "name": "RHSA-2017:0985",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0985"
            },
            {
              "name": "RHSA-2017:0987",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0987"
            },
            {
              "name": "RHSA-2017:0984",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0984"
            },
            {
              "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
            },
            {
              "name": "RHSA-2017:0988",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0988"
            },
            {
              "name": "RHSA-2017:1441",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1441"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9603"
            },
            {
              "name": "RHSA-2017:0981",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0981"
            },
            {
              "name": "RHSA-2017:0980",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0980"
            },
            {
              "name": "RHSA-2017:1205",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1205"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9603",
    "datePublished": "2018-07-27T21:00:00",
    "dateReserved": "2016-11-23T00:00:00",
    "dateUpdated": "2024-08-06T02:59:02.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-8112 (GCVE-0-2017-8112)

Vulnerability from cvelistv5

Published

2017-05-02 14:00

Modified

2024-08-05 16:27

Severity ?

CWE

Summary

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1445621	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201706-03	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/04/26/5	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/98015	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:27:22.448Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
          },
          {
            "name": "GLSA-201706-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-03"
          },
          {
            "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
          },
          {
            "name": "98015",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/98015"
          },
          {
            "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-04-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
        },
        {
          "name": "GLSA-201706-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-03"
        },
        {
          "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
        },
        {
          "name": "98015",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/98015"
        },
        {
          "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-8112",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1445621"
            },
            {
              "name": "GLSA-201706-03",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-03"
            },
            {
              "name": "[oss-security] 20170426 CVE-2017-8112 Qemu: scsi: vmw_pvscsi: infinite loop in pvscsi_log2",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/04/26/5"
            },
            {
              "name": "98015",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/98015"
            },
            {
              "name": "[qemu-devel] 20170425 Re: [PATCH] vmw_pvscsi: check message ring page count at initialisation",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-8112",
    "datePublished": "2017-05-02T14:00:00",
    "dateReserved": "2017-04-25T00:00:00",
    "dateUpdated": "2024-08-05T16:27:22.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:1774-1

Vulnerability from csaf_suse

CVE-2016-9602 (GCVE-0-2016-9602)

Vulnerability from cvelistv5

CVE-2017-6505 (GCVE-0-2017-6505)

Vulnerability from cvelistv5

CVE-2017-9374 (GCVE-0-2017-9374)

Vulnerability from cvelistv5

CVE-2017-8380 (GCVE-0-2017-8380)

Vulnerability from cvelistv5

CVE-2016-10029 (GCVE-0-2016-10029)

Vulnerability from cvelistv5

CVE-2017-7718 (GCVE-0-2017-7718)

Vulnerability from cvelistv5

CVE-2017-9330 (GCVE-0-2017-9330)

Vulnerability from cvelistv5

CVE-2017-8309 (GCVE-0-2017-8309)

Vulnerability from cvelistv5

CVE-2017-9375 (GCVE-0-2017-9375)

Vulnerability from cvelistv5

CVE-2017-5973 (GCVE-0-2017-5973)

Vulnerability from cvelistv5

CVE-2017-8086 (GCVE-0-2017-8086)

Vulnerability from cvelistv5

CVE-2017-5579 (GCVE-0-2017-5579)

Vulnerability from cvelistv5

CVE-2017-5987 (GCVE-0-2017-5987)

Vulnerability from cvelistv5

CVE-2017-7471 (GCVE-0-2017-7471)

Vulnerability from cvelistv5

CVE-2017-7493 (GCVE-0-2017-7493)

Vulnerability from cvelistv5

CVE-2017-8379 (GCVE-0-2017-8379)

Vulnerability from cvelistv5

CVE-2017-9503 (GCVE-0-2017-9503)

Vulnerability from cvelistv5

CVE-2017-9373 (GCVE-0-2017-9373)

Vulnerability from cvelistv5

CVE-2017-7980 (GCVE-0-2017-7980)

Vulnerability from cvelistv5

CVE-2017-7377 (GCVE-0-2017-7377)

Vulnerability from cvelistv5

CVE-2016-10028 (GCVE-0-2016-10028)

Vulnerability from cvelistv5

CVE-2016-9603 (GCVE-0-2016-9603)

Vulnerability from cvelistv5

CVE-2017-8112 (GCVE-0-2017-8112)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature