csaf_suse - suse-su-2018:0762-1

suse-su-2018:0762-1

Vulnerability from csaf_suse

Published

2018-03-21 16:41

Modified

2018-03-21 16:41

Summary

Security update for qemu

Notes

Title of the patch

Security update for qemu

Description of the patch

This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. (CVE-2017-5715 bsc#1068032) The January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM guests by exposing the spec-ctrl feature for all x86 vcpu types, which was the quick and dirty approach, but not the proper solution. We replaced our initial patch by the patches from upstream. This update defines spec_ctrl and ibpb cpu feature flags as well as new cpu models which are clones of existing models with either -IBRS or -IBPB added to the end of the model name. These new vcpu models explicitly include the new feature(s), whereas the feature flags can be added to the cpu parameter as with other features. In short, for continued Spectre v2 protection, ensure that either the appropriate cpu feature flag is added to the QEMU command-line, or one of the new cpu models is used. Although migration from older versions is supported, the new cpu features won't be properly exposed to the guest until it is restarted with the cpu features explicitly added. A reboot is insufficient. A warning patch is added which attempts to detect a migration from a qemu version which had the quick and dirty fix (it only detects certain cases, but hopefully is helpful.) For additional information on Spectre v2 as it relates to QEMU, see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/ A patch is added to continue to detect Spectre v2 mitigation features (as shown by cpuid), and if found provide that feature to guests, even if running on older KVM (kernel) versions which do not yet expose that feature to QEMU. (bsc#1082276) These two patches will be removed when we can reasonably assume everyone is running with the appropriate updates. Spectre fixes for IBM Z Series were included by providing more hw features to guests (bsc#1076813) Also security fixes for the following CVE issues are included: - CVE-2017-17381: The Virtio Vring implementation in QEMU allowed local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings. (bsc#1071228) - CVE-2017-16845: The PS2 driver in Qemu did not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access. (bsc#1068613) - CVE-2017-15119: The Network Block Device (NBD) server in Quick Emulator (QEMU), was vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS. (bsc#1070144) - CVE-2017-18043: Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allowed a user to cause a denial of service (Qemu process crash). (bsc#1076775) - CVE-2018-5683: The VGA driver in Qemu allowed local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation. (bsc#1076114) - CVE-2018-7550: The multiboot functionality in Quick Emulator (aka QEMU) allowed local guest OS users to execute arbitrary code on the QEMU host via an out-of-bounds read or write memory access. (bsc#1083291) - CVE-2017-15124: VNC server implementation in Quick Emulator (QEMU) was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host. (bsc#1073489) Additional bugs fixed: - Fix pcihp for 1.6 and older machine types (bsc#1074572) - Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)

Patchnames

SUSE-CAASP-ALL-2018-516,SUSE-SLE-DESKTOP-12-SP3-2018-516,SUSE-SLE-SERVER-12-SP3-2018-516

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for qemu",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for qemu fixes the following issues:\n\nThis update has the next round of Spectre v2 related patches, which\nnow integrate with corresponding changes in libvirt. (CVE-2017-5715\nbsc#1068032)\n\nThe January 2018 release of qemu initially addressed the Spectre v2\nvulnerability for KVM guests by exposing the spec-ctrl feature\nfor all x86 vcpu types, which was the quick and dirty approach,\nbut not the proper solution.\n\nWe replaced our initial patch by the patches from upstream.\n\nThis update defines spec_ctrl and ibpb cpu feature flags as well as new\ncpu models which are clones of existing models with either -IBRS or -IBPB\nadded to the end of the model name. These new vcpu models explicitly\ninclude the new feature(s), whereas the feature flags can be added\nto the cpu parameter as with other features. In short, for continued\nSpectre v2 protection, ensure that either the appropriate cpu feature\nflag is added to the QEMU command-line, or one of the new cpu models is\nused.\n\nAlthough migration from older versions is supported, the new cpu\nfeatures won\u0027t be properly exposed to the guest until it is restarted\nwith the cpu features explicitly added. A reboot is insufficient.\n\nA warning patch is added which attempts to detect a migration\nfrom a qemu version which had the quick and dirty fix (it only\ndetects certain cases, but hopefully is helpful.)\nFor additional information on Spectre v2 as it relates to QEMU,\nsee:\n        https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/\n\nA patch is added to continue to detect Spectre v2 mitigation\nfeatures (as shown by cpuid), and if found provide that feature\nto guests, even if running on older KVM (kernel) versions which\ndo not yet expose that feature to QEMU. (bsc#1082276)\n\nThese two patches will be removed when we can reasonably assume\neveryone is running with the appropriate updates.\n\nSpectre fixes for IBM Z Series were included by providing more hw features\nto guests (bsc#1076813)\n\nAlso security fixes for the following CVE issues are included:\n\n- CVE-2017-17381: The Virtio Vring implementation in QEMU allowed local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings. (bsc#1071228)\n- CVE-2017-16845: The PS2 driver in Qemu did not validate \u0027rptr\u0027 and \u0027count\u0027 values during guest migration, leading to out-of-bounds access. (bsc#1068613)\n- CVE-2017-15119: The Network Block Device (NBD) server in Quick Emulator (QEMU), was vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS. (bsc#1070144)\n- CVE-2017-18043: Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allowed a user to cause a denial of service (Qemu process crash). (bsc#1076775)\n- CVE-2018-5683: The VGA driver in Qemu allowed local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation. (bsc#1076114)\n- CVE-2018-7550: The multiboot functionality in Quick Emulator (aka QEMU) allowed local guest OS users to execute arbitrary code on the QEMU host via an out-of-bounds read or write memory access. (bsc#1083291)\n- CVE-2017-15124: VNC server implementation in Quick Emulator (QEMU) was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host. (bsc#1073489)\n\nAdditional bugs fixed:\n\n- Fix pcihp for 1.6 and older machine types (bsc#1074572)\n- Fix packaging dependencies (coreutils) for qemu-ksm package (bsc#1040202)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-CAASP-ALL-2018-516,SUSE-SLE-DESKTOP-12-SP3-2018-516,SUSE-SLE-SERVER-12-SP3-2018-516",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_0762-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2018:0762-1",
        "url": "https://www.suse.com/support/update/announcement/2018/suse-su-20180762-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2018:0762-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2018-March/003831.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1040202",
        "url": "https://bugzilla.suse.com/1040202"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1068032",
        "url": "https://bugzilla.suse.com/1068032"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1068613",
        "url": "https://bugzilla.suse.com/1068613"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1070144",
        "url": "https://bugzilla.suse.com/1070144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1071228",
        "url": "https://bugzilla.suse.com/1071228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1073489",
        "url": "https://bugzilla.suse.com/1073489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1074572",
        "url": "https://bugzilla.suse.com/1074572"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1076114",
        "url": "https://bugzilla.suse.com/1076114"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1076775",
        "url": "https://bugzilla.suse.com/1076775"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1076813",
        "url": "https://bugzilla.suse.com/1076813"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1082276",
        "url": "https://bugzilla.suse.com/1082276"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1083291",
        "url": "https://bugzilla.suse.com/1083291"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-15119 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-15119/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-15124 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-15124/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-16845 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-16845/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-17381 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-17381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-18043 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-18043/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5715 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5715/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5683 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5683/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-7550 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-7550/"
      }
    ],
    "title": "Security update for qemu",
    "tracking": {
      "current_release_date": "2018-03-21T16:41:39Z",
      "generator": {
        "date": "2018-03-21T16:41:39Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2018:0762-1",
      "initial_release_date": "2018-03-21T16:41:39Z",
      "revision_history": [
        {
          "date": "2018-03-21T16:41:39Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-arm-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-arm-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-arm-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-block-curl-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-block-curl-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-iscsi-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-block-iscsi-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-block-iscsi-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-block-rbd-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-block-rbd-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-block-ssh-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-block-ssh-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-guest-agent-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-guest-agent-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-lang-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-lang-2.9.1-6.12.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.9.1-6.12.1.aarch64",
                "product": {
                  "name": "qemu-tools-2.9.1-6.12.1.aarch64",
                  "product_id": "qemu-tools-2.9.1-6.12.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-ipxe-1.0.0-6.12.1.noarch",
                "product": {
                  "name": "qemu-ipxe-1.0.0-6.12.1.noarch",
                  "product_id": "qemu-ipxe-1.0.0-6.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-seabios-1.10.2-6.12.1.noarch",
                "product": {
                  "name": "qemu-seabios-1.10.2-6.12.1.noarch",
                  "product_id": "qemu-seabios-1.10.2-6.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-sgabios-8-6.12.1.noarch",
                "product": {
                  "name": "qemu-sgabios-8-6.12.1.noarch",
                  "product_id": "qemu-sgabios-8-6.12.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-vgabios-1.10.2-6.12.1.noarch",
                "product": {
                  "name": "qemu-vgabios-1.10.2-6.12.1.noarch",
                  "product_id": "qemu-vgabios-1.10.2-6.12.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-block-curl-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-block-curl-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-block-ssh-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-block-ssh-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-guest-agent-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-guest-agent-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-lang-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-lang-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-ppc-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-ppc-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-ppc-2.9.1-6.12.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.9.1-6.12.1.ppc64le",
                "product": {
                  "name": "qemu-tools-2.9.1-6.12.1.ppc64le",
                  "product_id": "qemu-tools-2.9.1-6.12.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-block-curl-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-block-curl-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-iscsi-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-block-iscsi-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-block-iscsi-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-block-ssh-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-block-ssh-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-guest-agent-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-guest-agent-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-kvm-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-kvm-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-lang-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-lang-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-s390-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-s390-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-s390-2.9.1-6.12.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.9.1-6.12.1.s390x",
                "product": {
                  "name": "qemu-tools-2.9.1-6.12.1.s390x",
                  "product_id": "qemu-tools-2.9.1-6.12.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-curl-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-block-curl-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-block-curl-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-kvm-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-kvm-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-tools-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-tools-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-tools-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-x86-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-x86-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-x86-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-iscsi-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-block-iscsi-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-block-iscsi-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-rbd-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-block-rbd-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-block-rbd-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-block-ssh-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-block-ssh-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-block-ssh-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-guest-agent-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-guest-agent-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-guest-agent-2.9.1-6.12.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "qemu-lang-2.9.1-6.12.1.x86_64",
                "product": {
                  "name": "qemu-lang-2.9.1-6.12.1.x86_64",
                  "product_id": "qemu-lang-2.9.1-6.12.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-6.12.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-seabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-6.12.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-x86-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-arm-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-arm-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-rbd-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-6.12.1.noarch as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-kvm-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-s390-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-seabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-6.12.1.noarch as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-x86-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-arm-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-arm-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-curl-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-curl-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-iscsi-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-iscsi-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-rbd-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-rbd-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-rbd-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-block-ssh-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-block-ssh-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-guest-agent-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-guest-agent-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ipxe-1.0.0-6.12.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch"
        },
        "product_reference": "qemu-ipxe-1.0.0-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-kvm-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-kvm-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-lang-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-lang-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-ppc-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-ppc-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-s390-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-s390-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-seabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-seabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-sgabios-8-6.12.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch"
        },
        "product_reference": "qemu-sgabios-8-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-tools-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-tools-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-vgabios-1.10.2-6.12.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch"
        },
        "product_reference": "qemu-vgabios-1.10.2-6.12.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-x86-2.9.1-6.12.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        },
        "product_reference": "qemu-x86-2.9.1-6.12.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-15119",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-15119"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-15119",
          "url": "https://www.suse.com/security/cve/CVE-2017-15119"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1070144 for CVE-2017-15119",
          "url": "https://bugzilla.suse.com/1070144"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-15119"
    },
    {
      "cve": "CVE-2017-15124",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-15124"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-15124",
          "url": "https://www.suse.com/security/cve/CVE-2017-15124"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1073489 for CVE-2017-15124",
          "url": "https://bugzilla.suse.com/1073489"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-15124"
    },
    {
      "cve": "CVE-2017-16845",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-16845"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "hw/input/ps2.c in Qemu does not validate \u0027rptr\u0027 and \u0027count\u0027 values during guest migration, leading to out-of-bounds access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-16845",
          "url": "https://www.suse.com/security/cve/CVE-2017-16845"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1068613 for CVE-2017-16845",
          "url": "https://bugzilla.suse.com/1068613"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-16845"
    },
    {
      "cve": "CVE-2017-17381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-17381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-17381",
          "url": "https://www.suse.com/security/cve/CVE-2017-17381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1071228 for CVE-2017-17381",
          "url": "https://bugzilla.suse.com/1071228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-17381"
    },
    {
      "cve": "CVE-2017-18043",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-18043"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-18043",
          "url": "https://www.suse.com/security/cve/CVE-2017-18043"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076775 for CVE-2017-18043",
          "url": "https://bugzilla.suse.com/1076775"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "low"
        }
      ],
      "title": "CVE-2017-18043"
    },
    {
      "cve": "CVE-2017-5715",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5715"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5715",
          "url": "https://www.suse.com/security/cve/CVE-2017-5715"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1068032 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1068032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074562 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1074562"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074578 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1074578"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074701 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1074701"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074741 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1074741"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1074919 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1074919"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1075006 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1075006"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1075007 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1075007"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1075262 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1075262"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1075419 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1075419"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076115 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1076115"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076372 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1076372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076606 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1076606"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1078353 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1078353"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1080039 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1080039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087887 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1087887"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1087939 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1087939"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1088147 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1088147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089055 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1089055"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1091815 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1091815"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1095735 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1095735"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1102517 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1102517"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1105108 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1105108"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126516 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1126516"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173489 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1173489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1178658"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201457 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1201457"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201877 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1201877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203236 for CVE-2017-5715",
          "url": "https://bugzilla.suse.com/1203236"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-5715"
    },
    {
      "cve": "CVE-2018-5683",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5683"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5683",
          "url": "https://www.suse.com/security/cve/CVE-2018-5683"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076114 for CVE-2018-5683",
          "url": "https://bugzilla.suse.com/1076114"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1076116 for CVE-2018-5683",
          "url": "https://bugzilla.suse.com/1076116"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2018-5683",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5683"
    },
    {
      "cve": "CVE-2018-7550",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-7550"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-7550",
          "url": "https://www.suse.com/security/cve/CVE-2018-7550"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083291 for CVE-2018-7550",
          "url": "https://bugzilla.suse.com/1083291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1083292 for CVE-2018-7550",
          "url": "https://bugzilla.suse.com/1083292"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-arm-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-curl-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-iscsi-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-rbd-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-block-ssh-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-guest-agent-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ipxe-1.0.0-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-kvm-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-lang-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-ppc-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-s390-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-seabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-sgabios-8-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-tools-2.9.1-6.12.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-vgabios-1.10.2-6.12.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:qemu-x86-2.9.1-6.12.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2018-03-21T16:41:39Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-7550"
    }
  ]
}

CVE-2018-7550 (GCVE-0-2018-7550)

Vulnerability from cvelistv5

Published

2018-03-01 00:00

Modified

2024-08-05 06:31

Severity ?

CWE

Summary

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2018:1369	vendor-advisory
	https://lists.gnu.org/archive/html/qemu-devel/2018-02/msg06890.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2018/04/msg00016.html	mailing-list
	https://usn.ubuntu.com/3649-1/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2018/04/msg00015.html	mailing-list
	http://www.securityfocus.com/bid/103181	vdb-entry
	https://bugzilla.redhat.com/show_bug.cgi?id=1549798
	https://access.redhat.com/errata/RHSA-2018:2462	vendor-advisory
	https://github.com/orangecertcc/security-research/security/advisories/GHSA-f49v-45qp-cv53

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:31:04.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:1369",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1369"
          },
          {
            "name": "[qemu-devel] 20180228 [PATCH] multiboot: check mh_load_end_addr address field",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-02/msg06890.html"
          },
          {
            "name": "[debian-lts-announce] 20180417 [SECURITY] [DLA 1351-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00016.html"
          },
          {
            "name": "USN-3649-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3649-1/"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "[debian-lts-announce] 20180417 [SECURITY] [DLA 1350-1] qemu-kvm security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00015.html"
          },
          {
            "name": "103181",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103181"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549798"
          },
          {
            "name": "RHSA-2018:2462",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2462"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-f49v-45qp-cv53"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-30T21:56:51.639818",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:1369",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1369"
        },
        {
          "name": "[qemu-devel] 20180228 [PATCH] multiboot: check mh_load_end_addr address field",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-02/msg06890.html"
        },
        {
          "name": "[debian-lts-announce] 20180417 [SECURITY] [DLA 1351-1] qemu security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00016.html"
        },
        {
          "name": "USN-3649-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/3649-1/"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "[debian-lts-announce] 20180417 [SECURITY] [DLA 1350-1] qemu-kvm security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/04/msg00015.html"
        },
        {
          "name": "103181",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.securityfocus.com/bid/103181"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549798"
        },
        {
          "name": "RHSA-2018:2462",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2462"
        },
        {
          "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-f49v-45qp-cv53"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-7550",
    "datePublished": "2018-03-01T00:00:00",
    "dateReserved": "2018-02-27T00:00:00",
    "dateUpdated": "2024-08-05T06:31:04.536Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5715 (GCVE-0-2017-5715)

Vulnerability from cvelistv5

Published

2018-01-04 13:00

Modified

2025-05-06 14:59

Severity ?

5.6 (Medium) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE

Information Disclosure

Summary

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

References

►

URL

Tags

	http://nvidia.custhelp.com/app/answers/detail/a_id/4609	x_refsource_CONFIRM
	https://usn.ubuntu.com/3560-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4187	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/3542-2/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201810-06	vendor-advisory, x_refsource_GENTOO
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_refsource_CONFIRM
	https://usn.ubuntu.com/3540-2/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/security/vulnerabilities/speculativeexecution	x_refsource_CONFIRM
	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3597-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html	vendor-advisory, x_refsource_SUSE
	http://nvidia.custhelp.com/app/answers/detail/a_id/4611	x_refsource_CONFIRM
	https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	https://cert.vde.com/en-us/advisories/vde-2018-002	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4120	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3580-1/	vendor-advisory, x_refsource_UBUNTU
	https://support.f5.com/csp/article/K91229003	x_refsource_CONFIRM
	https://usn.ubuntu.com/3531-3/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3620-2/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3582-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2018/dsa-4188	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0292	vendor-advisory, x_refsource_REDHAT
	http://xenbits.xen.org/xsa/advisory-254.html	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20180104-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html	vendor-advisory, x_refsource_SUSE
	https://www.synology.com/support/security/Synology_SA_18_01	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html	x_refsource_MISC
	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/102376	vdb-entry, x_refsource_BID
	https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability	x_refsource_CONFIRM
	https://usn.ubuntu.com/3594-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.kb.cert.org/vuls/id/584653	third-party-advisory, x_refsource_CERT-VN
	https://www.kb.cert.org/vuls/id/180049	third-party-advisory, x_refsource_CERT-VN
	https://cert.vde.com/en-us/advisories/vde-2018-003	x_refsource_CONFIRM
	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3690-1/	vendor-advisory, x_refsource_UBUNTU
	https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us	x_refsource_CONFIRM
	https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001	x_refsource_CONFIRM
	https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us	x_refsource_CONFIRM
	https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html	x_refsource_CONFIRM
	https://usn.ubuntu.com/3549-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html	vendor-advisory, x_refsource_SUSE
	https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/	x_refsource_CONFIRM
	https://support.citrix.com/article/CTX231399	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_refsource_CONFIRM
	https://spectreattack.com/	x_refsource_MISC
	https://usn.ubuntu.com/3531-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc	vendor-advisory, x_refsource_FREEBSD
	https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3581-1/	vendor-advisory, x_refsource_UBUNTU
	https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1040071	vdb-entry, x_refsource_SECTRACK
	https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html	mailing-list, x_refsource_MLIST
	https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088&languageid=en-fr	x_refsource_CONFIRM
	https://usn.ubuntu.com/3597-2/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3581-2/	vendor-advisory, x_refsource_UBUNTU
	http://nvidia.custhelp.com/app/answers/detail/a_id/4614	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html	mailing-list, x_refsource_MLIST
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel	vendor-advisory, x_refsource_CISCO
	https://usn.ubuntu.com/usn/usn-3516-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/43427/	exploit, x_refsource_EXPLOIT-DB
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/3541-2/	vendor-advisory, x_refsource_UBUNTU
	https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html	x_refsource_MISC
	https://support.lenovo.com/us/en/solutions/LEN-18282	x_refsource_CONFIRM
	https://usn.ubuntu.com/3777-3/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html	vendor-advisory, x_refsource_SUSE
	https://www.vmware.com/security/advisories/VMSA-2018-0007.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://nvidia.custhelp.com/app/answers/detail/a_id/4613	x_refsource_CONFIRM
	https://usn.ubuntu.com/3561-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3582-2/	vendor-advisory, x_refsource_UBUNTU
	https://seclists.org/bugtraq/2019/Jun/36	mailing-list, x_refsource_BUGTRAQ
	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt	x_refsource_CONFIRM
	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf	x_refsource_CONFIRM
	https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc	vendor-advisory, x_refsource_FREEBSD
	https://seclists.org/bugtraq/2019/Nov/16	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html	x_refsource_MISC
	https://security.paloaltonetworks.com/CVE-2017-5715	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	Intel Corporation	Microprocessors with Speculative Execution	Version: All

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:11:48.456Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
          },
          {
            "name": "USN-3560-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3560-1/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
          },
          {
            "name": "DSA-4187",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4187"
          },
          {
            "name": "USN-3542-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3542-2/"
          },
          {
            "name": "GLSA-201810-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-06"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "name": "USN-3540-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3540-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "USN-3597-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3597-1/"
          },
          {
            "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
          },
          {
            "name": "SUSE-SU-2018:0012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
          },
          {
            "name": "SUSE-SU-2018:0011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
          },
          {
            "name": "DSA-4120",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4120"
          },
          {
            "name": "openSUSE-SU-2018:0013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
          },
          {
            "name": "USN-3580-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3580-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K91229003"
          },
          {
            "name": "USN-3531-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3531-3/"
          },
          {
            "name": "USN-3620-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3620-2/"
          },
          {
            "name": "openSUSE-SU-2018:0022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
          },
          {
            "name": "USN-3582-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-1/"
          },
          {
            "name": "DSA-4188",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4188"
          },
          {
            "name": "RHSA-2018:0292",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0292"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-254.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
          },
          {
            "name": "SUSE-SU-2018:0019",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_01"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
          },
          {
            "name": "102376",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102376"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
          },
          {
            "name": "USN-3594-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3594-1/"
          },
          {
            "name": "VU#584653",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/584653"
          },
          {
            "name": "VU#180049",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/180049"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
          },
          {
            "name": "SUSE-SU-2018:0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
          },
          {
            "name": "USN-3690-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3690-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
          },
          {
            "name": "USN-3549-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3549-1/"
          },
          {
            "name": "SUSE-SU-2018:0007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX231399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://spectreattack.com/"
          },
          {
            "name": "USN-3531-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3531-1/"
          },
          {
            "name": "FreeBSD-SA-18:03",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
          },
          {
            "name": "SUSE-SU-2018:0006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
          },
          {
            "name": "USN-3581-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
          },
          {
            "name": "1040071",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040071"
          },
          {
            "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
          },
          {
            "name": "USN-3597-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3597-2/"
          },
          {
            "name": "USN-3581-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3581-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
          },
          {
            "name": "SUSE-SU-2018:0010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
          },
          {
            "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
          },
          {
            "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
          },
          {
            "name": "USN-3516-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
          },
          {
            "name": "43427",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/43427/"
          },
          {
            "name": "SUSE-SU-2018:0020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
          },
          {
            "name": "USN-3541-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3541-2/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
          },
          {
            "name": "USN-3777-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3777-3/"
          },
          {
            "name": "openSUSE-SU-2018:0023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
          },
          {
            "name": "SUSE-SU-2018:0008",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
          },
          {
            "name": "USN-3561-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3561-1/"
          },
          {
            "name": "USN-3582-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3582-2/"
          },
          {
            "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Jun/36"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
          },
          {
            "name": "FreeBSD-SA-19:26",
            "tags": [
              "vendor-advisory",
              "x_refsource_FREEBSD",
              "x_transferred"
            ],
            "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
          },
          {
            "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/16"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
          },
          {
            "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
          },
          {
            "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2017-5715",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:09.657900Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-203",
                "description": "CWE-203 Observable Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-06T14:59:36.405Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microprocessors with Speculative Execution",
          "vendor": "Intel Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "All"
            }
          ]
        }
      ],
      "datePublic": "2018-01-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-16T08:06:27.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
        },
        {
          "name": "USN-3560-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3560-1/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
        },
        {
          "name": "DSA-4187",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4187"
        },
        {
          "name": "USN-3542-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3542-2/"
        },
        {
          "name": "GLSA-201810-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-06"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "name": "USN-3540-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3540-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "USN-3597-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3597-1/"
        },
        {
          "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
        },
        {
          "name": "SUSE-SU-2018:0012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
        },
        {
          "name": "SUSE-SU-2018:0011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
        },
        {
          "name": "DSA-4120",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4120"
        },
        {
          "name": "openSUSE-SU-2018:0013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
        },
        {
          "name": "USN-3580-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3580-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K91229003"
        },
        {
          "name": "USN-3531-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3531-3/"
        },
        {
          "name": "USN-3620-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3620-2/"
        },
        {
          "name": "openSUSE-SU-2018:0022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
        },
        {
          "name": "USN-3582-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-1/"
        },
        {
          "name": "DSA-4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4188"
        },
        {
          "name": "RHSA-2018:0292",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0292"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-254.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
        },
        {
          "name": "SUSE-SU-2018:0019",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_01"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
        },
        {
          "name": "102376",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102376"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
        },
        {
          "name": "USN-3594-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3594-1/"
        },
        {
          "name": "VU#584653",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/584653"
        },
        {
          "name": "VU#180049",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/180049"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
        },
        {
          "name": "SUSE-SU-2018:0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
        },
        {
          "name": "USN-3690-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3690-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
        },
        {
          "name": "USN-3549-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3549-1/"
        },
        {
          "name": "SUSE-SU-2018:0007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX231399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://spectreattack.com/"
        },
        {
          "name": "USN-3531-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3531-1/"
        },
        {
          "name": "FreeBSD-SA-18:03",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
        },
        {
          "name": "SUSE-SU-2018:0006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
        },
        {
          "name": "USN-3581-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
        },
        {
          "name": "1040071",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040071"
        },
        {
          "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
        },
        {
          "name": "USN-3597-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3597-2/"
        },
        {
          "name": "USN-3581-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3581-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
        },
        {
          "name": "SUSE-SU-2018:0010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
        },
        {
          "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
        },
        {
          "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
        },
        {
          "name": "USN-3516-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
        },
        {
          "name": "43427",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/43427/"
        },
        {
          "name": "SUSE-SU-2018:0020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
        },
        {
          "name": "USN-3541-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3541-2/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
        },
        {
          "name": "USN-3777-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3777-3/"
        },
        {
          "name": "openSUSE-SU-2018:0023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
        },
        {
          "name": "SUSE-SU-2018:0008",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
        },
        {
          "name": "USN-3561-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3561-1/"
        },
        {
          "name": "USN-3582-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3582-2/"
        },
        {
          "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Jun/36"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
        },
        {
          "name": "FreeBSD-SA-19:26",
          "tags": [
            "vendor-advisory",
            "x_refsource_FREEBSD"
          ],
          "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
        },
        {
          "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/16"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
        },
        {
          "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
        },
        {
          "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "DATE_PUBLIC": "2018-01-03T00:00:00",
          "ID": "CVE-2017-5715",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Microprocessors with Speculative Execution",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Intel Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4609"
            },
            {
              "name": "USN-3560-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3560-1/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1422-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html"
            },
            {
              "name": "DSA-4187",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4187"
            },
            {
              "name": "USN-3542-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3542-2/"
            },
            {
              "name": "GLSA-201810-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-06"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
            },
            {
              "name": "USN-3540-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3540-2/"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/speculativeexecution",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/vulnerabilities/speculativeexecution"
            },
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "USN-3597-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3597-1/"
            },
            {
              "name": "[debian-lts-announce] 20180715 [SECURITY] [DLA 1422-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html"
            },
            {
              "name": "SUSE-SU-2018:0012",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html"
            },
            {
              "name": "SUSE-SU-2018:0011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4611"
            },
            {
              "name": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html",
              "refsource": "MISC",
              "url": "https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2018-002",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2018-002"
            },
            {
              "name": "DSA-4120",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4120"
            },
            {
              "name": "openSUSE-SU-2018:0013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00009.html"
            },
            {
              "name": "USN-3580-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3580-1/"
            },
            {
              "name": "https://support.f5.com/csp/article/K91229003",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K91229003"
            },
            {
              "name": "USN-3531-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3531-3/"
            },
            {
              "name": "USN-3620-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3620-2/"
            },
            {
              "name": "openSUSE-SU-2018:0022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html"
            },
            {
              "name": "USN-3582-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-1/"
            },
            {
              "name": "DSA-4188",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4188"
            },
            {
              "name": "RHSA-2018:0292",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0292"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-254.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-254.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20180104-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20180104-0001/"
            },
            {
              "name": "SUSE-SU-2018:0019",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00012.html"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_01",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_01"
            },
            {
              "name": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt"
            },
            {
              "name": "102376",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102376"
            },
            {
              "name": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability",
              "refsource": "CONFIRM",
              "url": "https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability"
            },
            {
              "name": "USN-3594-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3594-1/"
            },
            {
              "name": "VU#584653",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/584653"
            },
            {
              "name": "VU#180049",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/180049"
            },
            {
              "name": "https://cert.vde.com/en-us/advisories/vde-2018-003",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en-us/advisories/vde-2018-003"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
            },
            {
              "name": "SUSE-SU-2018:0009",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00005.html"
            },
            {
              "name": "USN-3690-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3690-1/"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us"
            },
            {
              "name": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001",
              "refsource": "CONFIRM",
              "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001"
            },
            {
              "name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us",
              "refsource": "CONFIRM",
              "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03871en_us"
            },
            {
              "name": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0004.html"
            },
            {
              "name": "USN-3549-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3549-1/"
            },
            {
              "name": "SUSE-SU-2018:0007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00003.html"
            },
            {
              "name": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/"
            },
            {
              "name": "https://support.citrix.com/article/CTX231399",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX231399"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
            },
            {
              "name": "https://spectreattack.com/",
              "refsource": "MISC",
              "url": "https://spectreattack.com/"
            },
            {
              "name": "USN-3531-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3531-1/"
            },
            {
              "name": "FreeBSD-SA-18:03",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-18:03.speculative_execution.asc"
            },
            {
              "name": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/",
              "refsource": "CONFIRM",
              "url": "https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/"
            },
            {
              "name": "SUSE-SU-2018:0006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00002.html"
            },
            {
              "name": "USN-3581-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-1/"
            },
            {
              "name": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/",
              "refsource": "CONFIRM",
              "url": "https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/"
            },
            {
              "name": "1040071",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040071"
            },
            {
              "name": "[debian-lts-announce] 20180916 [SECURITY] [DLA 1506-1] intel-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html"
            },
            {
              "name": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr",
              "refsource": "CONFIRM",
              "url": "https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00088\u0026languageid=en-fr"
            },
            {
              "name": "USN-3597-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3597-2/"
            },
            {
              "name": "USN-3581-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3581-2/"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4614"
            },
            {
              "name": "SUSE-SU-2018:0010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html"
            },
            {
              "name": "[debian-lts-announce] 20180502 [SECURITY] [DLA 1369-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html"
            },
            {
              "name": "20180104 CPU Side-Channel Information Disclosure Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel"
            },
            {
              "name": "USN-3516-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/usn/usn-3516-1/"
            },
            {
              "name": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html"
            },
            {
              "name": "43427",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/43427/"
            },
            {
              "name": "SUSE-SU-2018:0020",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00013.html"
            },
            {
              "name": "USN-3541-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3541-2/"
            },
            {
              "name": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html",
              "refsource": "MISC",
              "url": "https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html"
            },
            {
              "name": "https://support.lenovo.com/us/en/solutions/LEN-18282",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/solutions/LEN-18282"
            },
            {
              "name": "USN-3777-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3777-3/"
            },
            {
              "name": "openSUSE-SU-2018:0023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html"
            },
            {
              "name": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html",
              "refsource": "CONFIRM",
              "url": "https://www.vmware.com/security/advisories/VMSA-2018-0007.html"
            },
            {
              "name": "SUSE-SU-2018:0008",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00004.html"
            },
            {
              "name": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613",
              "refsource": "CONFIRM",
              "url": "http://nvidia.custhelp.com/app/answers/detail/a_id/4613"
            },
            {
              "name": "USN-3561-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3561-1/"
            },
            {
              "name": "USN-3582-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3582-2/"
            },
            {
              "name": "20190624 [SECURITY] [DSA 4469-1] libvirt security update",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Jun/36"
            },
            {
              "name": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt",
              "refsource": "CONFIRM",
              "url": "http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt"
            },
            {
              "name": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf"
            },
            {
              "name": "FreeBSD-SA-19:26",
              "refsource": "FREEBSD",
              "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:26.mcu.asc"
            },
            {
              "name": "20191112 FreeBSD Security Advisory FreeBSD-SA-19:26.mcu",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/16"
            },
            {
              "name": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.html"
            },
            {
              "name": "https://security.paloaltonetworks.com/CVE-2017-5715",
              "refsource": "CONFIRM",
              "url": "https://security.paloaltonetworks.com/CVE-2017-5715"
            },
            {
              "name": "[debian-lts-announce] 20200320 [SECURITY] [DLA 2148-1] amd64-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00025.html"
            },
            {
              "name": "[debian-lts-announce] 20210816 [SECURITY] [DLA 2743-1] amd64-microcode security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00019.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2017-5715",
    "datePublished": "2018-01-04T13:00:00.000Z",
    "dateReserved": "2017-02-01T00:00:00.000Z",
    "dateUpdated": "2025-05-06T14:59:36.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-15119 (GCVE-0-2017-15119)

Vulnerability from cvelistv5

Published

2018-07-27 16:00

Modified

2024-08-05 19:50

Severity ?

5.8 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE

CWE-400

Summary

The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2017/11/28/9	x_refsource_MISC
	http://www.securityfocus.com/bid/102011	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1113	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	QEMU	qemu	Version: 2.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.089Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/11/28/9"
          },
          {
            "name": "102011",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102011"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119"
          },
          {
            "name": "RHSA-2018:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1104"
          },
          {
            "name": "RHSA-2018:1113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1113"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "qemu",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.11"
            }
          ]
        }
      ],
      "datePublic": "2017-11-23T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-07-28T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/11/28/9"
        },
        {
          "name": "102011",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102011"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119"
        },
        {
          "name": "RHSA-2018:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1104"
        },
        {
          "name": "RHSA-2018:1113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1113"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-15119",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "qemu",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.11"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client could use this flaw to keep the NBD server from serving other requests, resulting in DoS."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.8/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html",
              "refsource": "MISC",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg05044.html"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2017/11/28/9",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2017/11/28/9"
            },
            {
              "name": "102011",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102011"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15119"
            },
            {
              "name": "RHSA-2018:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1104"
            },
            {
              "name": "RHSA-2018:1113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1113"
            },
            {
              "name": "USN-3575-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3575-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15119",
    "datePublished": "2018-07-27T16:00:00",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.089Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-17381 (GCVE-0-2017-17381)

Vulnerability from cvelistv5

Published

2017-12-06 16:00

Modified

2024-08-05 20:51

Severity ?

CWE

Summary

The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2017/12/05/2	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/102059	vdb-entry, x_refsource_BID
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:51:30.728Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20171205 CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/12/05/2"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "102059",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102059"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          },
          {
            "name": "[qemu-devel] 20171201 [PULL 6/7] virtio: check VirtQueue Vring object is set",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-12-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-31T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[oss-security] 20171205 CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/12/05/2"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "102059",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102059"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        },
        {
          "name": "[qemu-devel] 20171201 [PULL 6/7] virtio: check VirtQueue Vring object is set",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-17381",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20171205 CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/12/05/2"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "102059",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102059"
            },
            {
              "name": "USN-3575-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3575-1/"
            },
            {
              "name": "[qemu-devel] 20171201 [PULL 6/7] virtio: check VirtQueue Vring object is set",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-17381",
    "datePublished": "2017-12-06T16:00:00",
    "dateReserved": "2017-12-04T00:00:00",
    "dateUpdated": "2024-08-05T20:51:30.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-18043 (GCVE-0-2017-18043)

Vulnerability from cvelistv5

Published

2018-01-31 20:00

Modified

2024-08-05 21:06

Severity ?

CWE

Summary

Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash).

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2018/01/19/1	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU
	https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/102759	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:06:50.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "[oss-security] 20180119 CVE-2017-18043 Qemu: integer overflow in ROUND_UP macro could result in DoS",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2018/01/19/1"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854"
          },
          {
            "name": "102759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102759"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-01-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "[oss-security] 20180119 CVE-2017-18043 Qemu: integer overflow in ROUND_UP macro could result in DoS",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2018/01/19/1"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=2098b073f398cd628c09c5a78537a6854"
        },
        {
          "name": "102759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102759"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-18043",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu process crash)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "[oss-security] 20180119 CVE-2017-18043 Qemu: integer overflow in ROUND_UP macro could result in DoS",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2018/01/19/1"
            },
            {
              "name": "USN-3575-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3575-1/"
            },
            {
              "name": "https://git.qemu.org/?p=qemu.git;a=commit;h=2098b073f398cd628c09c5a78537a6854",
              "refsource": "CONFIRM",
              "url": "https://git.qemu.org/?p=qemu.git;a=commit;h=2098b073f398cd628c09c5a78537a6854"
            },
            {
              "name": "102759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102759"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-18043",
    "datePublished": "2018-01-31T20:00:00",
    "dateReserved": "2018-01-19T00:00:00",
    "dateUpdated": "2024-08-05T21:06:50.121Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-16845 (GCVE-0-2017-16845)

Vulnerability from cvelistv5

Published

2017-11-17 20:00

Modified

2024-08-05 20:35

Severity ?

CWE

Summary

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

References

►

URL

Tags

	https://usn.ubuntu.com/3649-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/101923	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T20:35:21.195Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3649-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3649-1/"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "[qemu-devel] 20171116 [PATCH v2] ps2: check PS2Queue indices in post_load routine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          },
          {
            "name": "101923",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101923"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-11-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "hw/input/ps2.c in Qemu does not validate \u0027rptr\u0027 and \u0027count\u0027 values during guest migration, leading to out-of-bounds access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3649-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3649-1/"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "[qemu-devel] 20171116 [PATCH v2] ps2: check PS2Queue indices in post_load routine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        },
        {
          "name": "101923",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101923"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-16845",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "hw/input/ps2.c in Qemu does not validate \u0027rptr\u0027 and \u0027count\u0027 values during guest migration, leading to out-of-bounds access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3649-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3649-1/"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "[qemu-devel] 20171116 [PATCH v2] ps2: check PS2Queue indices in post_load routine",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-11/msg02982.html"
            },
            {
              "name": "USN-3575-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3575-1/"
            },
            {
              "name": "101923",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101923"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-16845",
    "datePublished": "2017-11-17T20:00:00",
    "dateReserved": "2017-11-16T00:00:00",
    "dateUpdated": "2024-08-05T20:35:21.195Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-5683 (GCVE-0-2018-5683)

Vulnerability from cvelistv5

Published

2018-01-23 18:00

Modified

2024-08-05 05:40

Severity ?

CWE

Summary

The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.

References

►

URL

Tags

	https://access.redhat.com/errata/RHSA-2018:2162	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0816	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1104	vendor-advisory, x_refsource_REDHAT
	https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/102518	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2018/01/15/2	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:40:51.051Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2162",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2162"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "RHSA-2018:0816",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0816"
          },
          {
            "name": "RHSA-2018:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1104"
          },
          {
            "name": "[Qemu-devel] 20180112 Re: [Qemu-devel] [PATCH v3] vga: check the validation of memory addr when draw text",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          },
          {
            "name": "102518",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102518"
          },
          {
            "name": "[oss-security] 20180115 CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2018/01/15/2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-01-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:2162",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2162"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "RHSA-2018:0816",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0816"
        },
        {
          "name": "RHSA-2018:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1104"
        },
        {
          "name": "[Qemu-devel] 20180112 Re: [Qemu-devel] [PATCH v3] vga: check the validation of memory addr when draw text",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        },
        {
          "name": "102518",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102518"
        },
        {
          "name": "[oss-security] 20180115 CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2018/01/15/2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-5683",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2162",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2162"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "DSA-4213",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4213"
            },
            {
              "name": "RHSA-2018:0816",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:0816"
            },
            {
              "name": "RHSA-2018:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1104"
            },
            {
              "name": "[Qemu-devel] 20180112 Re: [Qemu-devel] [PATCH v3] vga: check the validation of memory addr when draw text",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html"
            },
            {
              "name": "USN-3575-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3575-1/"
            },
            {
              "name": "102518",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102518"
            },
            {
              "name": "[oss-security] 20180115 CVE-2018-5683 Qemu: Out-of-bounds read in vga_draw_text routine",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2018/01/15/2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-5683",
    "datePublished": "2018-01-23T18:00:00",
    "dateReserved": "2018-01-13T00:00:00",
    "dateUpdated": "2024-08-05T05:40:51.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-15124 (GCVE-0-2017-15124)

Vulnerability from cvelistv5

Published

2018-01-09 21:00

Modified

2024-08-05 19:50

Severity ?

CWE

CWE-770

Summary

VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host.

References

►

URL

Tags

	http://www.securityfocus.com/bid/102295	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1525195	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4213	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:0816	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1113	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3575-1/	vendor-advisory, x_refsource_UBUNTU
	https://access.redhat.com/errata/RHSA-2018:3062	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	QEMU	Qemu	Version: 2.11.0 and older

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T19:50:16.166Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "102295",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102295"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525195"
          },
          {
            "name": "DSA-4213",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4213"
          },
          {
            "name": "RHSA-2018:0816",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:0816"
          },
          {
            "name": "RHSA-2018:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1104"
          },
          {
            "name": "RHSA-2018:1113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1113"
          },
          {
            "name": "USN-3575-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3575-1/"
          },
          {
            "name": "RHSA-2018:3062",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:3062"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.11.0 and older"
            }
          ]
        }
      ],
      "datePublic": "2017-12-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory allocation issue, as it did not throttle the framebuffer updates sent to its client. If the client did not consume these updates, VNC server allocates growing memory to hold onto this data. A malicious remote VNC client could use this flaw to cause DoS to the server host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-31T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "102295",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102295"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1525195"
        },
        {
          "name": "DSA-4213",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4213"
        },
        {
          "name": "RHSA-2018:0816",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:0816"
        },
        {
          "name": "RHSA-2018:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1104"
        },
        {
          "name": "RHSA-2018:1113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1113"
        },
        {
          "name": "USN-3575-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3575-1/"
        },
        {
          "name": "RHSA-2018:3062",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:3062"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-15124",
    "datePublished": "2018-01-09T21:00:00Z",
    "dateReserved": "2017-10-08T00:00:00",
    "dateUpdated": "2024-08-05T19:50:16.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2018:0762-1

Vulnerability from csaf_suse

CVE-2018-7550 (GCVE-0-2018-7550)

Vulnerability from cvelistv5

CVE-2017-5715 (GCVE-0-2017-5715)

Vulnerability from cvelistv5

CVE-2017-15119 (GCVE-0-2017-15119)

Vulnerability from cvelistv5

CVE-2017-17381 (GCVE-0-2017-17381)

Vulnerability from cvelistv5

CVE-2017-18043 (GCVE-0-2017-18043)

Vulnerability from cvelistv5

CVE-2017-16845 (GCVE-0-2017-16845)

Vulnerability from cvelistv5

CVE-2018-5683 (GCVE-0-2018-5683)

Vulnerability from cvelistv5

CVE-2017-15124 (GCVE-0-2017-15124)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature