Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3795-1

Опубликовано: 27 окт. 2022
Источник: suse-cvrf

Описание

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2022-0216: Fixed a use after free issue found in hw/scsi/lsi53c895a.c. (bsc#1198038)
  • CVE-2022-35414: Fixed an uninitialized read during address translation that leads to a crash. (bsc#1201367)

Список пакетов

Container suse/sle-micro-rancher/5.3:latest
qemu-guest-agent-6.2.0-150400.37.8.2
Container suse/sle-micro-rancher/5.4:latest
qemu-guest-agent-6.2.0-150400.37.8.2
Image SLES15-SP4-EC2-ECS-HVM
qemu-tools-6.2.0-150400.37.8.2
SUSE Linux Enterprise Micro 5.3
qemu-6.2.0-150400.37.8.2
qemu-accel-tcg-x86-6.2.0-150400.37.8.2
qemu-arm-6.2.0-150400.37.8.2
qemu-audio-spice-6.2.0-150400.37.8.2
qemu-chardev-spice-6.2.0-150400.37.8.2
qemu-guest-agent-6.2.0-150400.37.8.2
qemu-hw-display-qxl-6.2.0-150400.37.8.2
qemu-hw-display-virtio-gpu-6.2.0-150400.37.8.2
qemu-hw-display-virtio-vga-6.2.0-150400.37.8.2
qemu-hw-usb-redirect-6.2.0-150400.37.8.2
qemu-ipxe-1.0.0+-150400.37.8.2
qemu-s390x-6.2.0-150400.37.8.2
qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-sgabios-8-150400.37.8.2
qemu-tools-6.2.0-150400.37.8.2
qemu-ui-opengl-6.2.0-150400.37.8.2
qemu-ui-spice-core-6.2.0-150400.37.8.2
qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-x86-6.2.0-150400.37.8.2
SUSE Linux Enterprise Module for Basesystem 15 SP4
qemu-tools-6.2.0-150400.37.8.2
SUSE Linux Enterprise Module for Server Applications 15 SP4
qemu-6.2.0-150400.37.8.2
qemu-SLOF-6.2.0-150400.37.8.2
qemu-accel-tcg-x86-6.2.0-150400.37.8.2
qemu-arm-6.2.0-150400.37.8.2
qemu-audio-alsa-6.2.0-150400.37.8.2
qemu-audio-pa-6.2.0-150400.37.8.2
qemu-audio-spice-6.2.0-150400.37.8.2
qemu-block-curl-6.2.0-150400.37.8.2
qemu-block-iscsi-6.2.0-150400.37.8.2
qemu-block-rbd-6.2.0-150400.37.8.2
qemu-block-ssh-6.2.0-150400.37.8.2
qemu-chardev-baum-6.2.0-150400.37.8.2
qemu-chardev-spice-6.2.0-150400.37.8.2
qemu-guest-agent-6.2.0-150400.37.8.2
qemu-hw-display-qxl-6.2.0-150400.37.8.2
qemu-hw-display-virtio-gpu-6.2.0-150400.37.8.2
qemu-hw-display-virtio-gpu-pci-6.2.0-150400.37.8.2
qemu-hw-display-virtio-vga-6.2.0-150400.37.8.2
qemu-hw-s390x-virtio-gpu-ccw-6.2.0-150400.37.8.2
qemu-hw-usb-host-6.2.0-150400.37.8.2
qemu-hw-usb-redirect-6.2.0-150400.37.8.2
qemu-ipxe-1.0.0+-150400.37.8.2
qemu-ksm-6.2.0-150400.37.8.2
qemu-kvm-6.2.0-150400.37.8.2
qemu-lang-6.2.0-150400.37.8.2
qemu-ppc-6.2.0-150400.37.8.2
qemu-s390x-6.2.0-150400.37.8.2
qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-sgabios-8-150400.37.8.2
qemu-skiboot-6.2.0-150400.37.8.2
qemu-ui-curses-6.2.0-150400.37.8.2
qemu-ui-gtk-6.2.0-150400.37.8.2
qemu-ui-opengl-6.2.0-150400.37.8.2
qemu-ui-spice-app-6.2.0-150400.37.8.2
qemu-ui-spice-core-6.2.0-150400.37.8.2
qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-x86-6.2.0-150400.37.8.2
openSUSE Leap 15.4
qemu-6.2.0-150400.37.8.2
qemu-SLOF-6.2.0-150400.37.8.2
qemu-accel-qtest-6.2.0-150400.37.8.2
qemu-accel-tcg-x86-6.2.0-150400.37.8.2
qemu-arm-6.2.0-150400.37.8.2
qemu-audio-alsa-6.2.0-150400.37.8.2
qemu-audio-jack-6.2.0-150400.37.8.2
qemu-audio-pa-6.2.0-150400.37.8.2
qemu-audio-spice-6.2.0-150400.37.8.2
qemu-block-curl-6.2.0-150400.37.8.2
qemu-block-dmg-6.2.0-150400.37.8.2
qemu-block-gluster-6.2.0-150400.37.8.2
qemu-block-iscsi-6.2.0-150400.37.8.2
qemu-block-nfs-6.2.0-150400.37.8.2
qemu-block-rbd-6.2.0-150400.37.8.2
qemu-block-ssh-6.2.0-150400.37.8.2
qemu-chardev-baum-6.2.0-150400.37.8.2
qemu-chardev-spice-6.2.0-150400.37.8.2
qemu-extra-6.2.0-150400.37.8.2
qemu-guest-agent-6.2.0-150400.37.8.2
qemu-hw-display-qxl-6.2.0-150400.37.8.2
qemu-hw-display-virtio-gpu-6.2.0-150400.37.8.2
qemu-hw-display-virtio-gpu-pci-6.2.0-150400.37.8.2
qemu-hw-display-virtio-vga-6.2.0-150400.37.8.2
qemu-hw-s390x-virtio-gpu-ccw-6.2.0-150400.37.8.2
qemu-hw-usb-host-6.2.0-150400.37.8.2
qemu-hw-usb-redirect-6.2.0-150400.37.8.2
qemu-hw-usb-smartcard-6.2.0-150400.37.8.2
qemu-ipxe-1.0.0+-150400.37.8.2
qemu-ivshmem-tools-6.2.0-150400.37.8.2
qemu-ksm-6.2.0-150400.37.8.2
qemu-kvm-6.2.0-150400.37.8.2
qemu-lang-6.2.0-150400.37.8.2
qemu-linux-user-6.2.0-150400.37.8.1
qemu-microvm-6.2.0-150400.37.8.2
qemu-ppc-6.2.0-150400.37.8.2
qemu-s390x-6.2.0-150400.37.8.2
qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-sgabios-8-150400.37.8.2
qemu-skiboot-6.2.0-150400.37.8.2
qemu-testsuite-6.2.0-150400.37.8.4
qemu-tools-6.2.0-150400.37.8.2
qemu-ui-curses-6.2.0-150400.37.8.2
qemu-ui-gtk-6.2.0-150400.37.8.2
qemu-ui-opengl-6.2.0-150400.37.8.2
qemu-ui-spice-app-6.2.0-150400.37.8.2
qemu-ui-spice-core-6.2.0-150400.37.8.2
qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.8.2
qemu-vhost-user-gpu-6.2.0-150400.37.8.2
qemu-x86-6.2.0-150400.37.8.2

Ссылки

Описание

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

Затронутые продукты
Container suse/sle-micro-rancher/5.3:latest:qemu-guest-agent-6.2.0-150400.37.8.2
Container suse/sle-micro-rancher/5.4:latest:qemu-guest-agent-6.2.0-150400.37.8.2
Image SLES15-SP4-EC2-ECS-HVM:qemu-tools-6.2.0-150400.37.8.2
SUSE Linux Enterprise Micro 5.3:qemu-6.2.0-150400.37.8.2
Ссылки

Описание

** DISPUTED ** softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time."

Затронутые продукты
Container suse/sle-micro-rancher/5.3:latest:qemu-guest-agent-6.2.0-150400.37.8.2
Container suse/sle-micro-rancher/5.4:latest:qemu-guest-agent-6.2.0-150400.37.8.2
Image SLES15-SP4-EC2-ECS-HVM:qemu-tools-6.2.0-150400.37.8.2
SUSE Linux Enterprise Micro 5.3:qemu-6.2.0-150400.37.8.2
Ссылки
Уязвимость SUSE-SU-2022:3795-1