Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3948-1

Опубликовано: 08 нояб. 2024
Источник: suse-cvrf

Описание

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834).
  • CVE-2024-8612: Fixed nformation leak in virtio devices (bsc#1230915).
  • CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007).

Список пакетов

Container suse/sle-micro/kvm-5.5:latest
qemu-guest-agent-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5
qemu-7.1.0-150500.49.24.1
qemu-SLOF-7.1.0-150500.49.24.1
qemu-accel-tcg-x86-7.1.0-150500.49.24.1
qemu-arm-7.1.0-150500.49.24.1
qemu-audio-spice-7.1.0-150500.49.24.1
qemu-block-curl-7.1.0-150500.49.24.1
qemu-chardev-spice-7.1.0-150500.49.24.1
qemu-guest-agent-7.1.0-150500.49.24.1
qemu-hw-display-qxl-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-7.1.0-150500.49.24.1
qemu-hw-display-virtio-vga-7.1.0-150500.49.24.1
qemu-hw-usb-redirect-7.1.0-150500.49.24.1
qemu-ipxe-1.0.0+-150500.49.24.1
qemu-ppc-7.1.0-150500.49.24.1
qemu-s390x-7.1.0-150500.49.24.1
qemu-seabios-1.16.0_0_gd239552-150500.49.24.1
qemu-sgabios-8-150500.49.24.1
qemu-tools-7.1.0-150500.49.24.1
qemu-ui-opengl-7.1.0-150500.49.24.1
qemu-ui-spice-core-7.1.0-150500.49.24.1
qemu-vgabios-1.16.0_0_gd239552-150500.49.24.1
qemu-x86-7.1.0-150500.49.24.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
qemu-tools-7.1.0-150500.49.24.1
SUSE Linux Enterprise Module for Package Hub 15 SP5
qemu-SLOF-7.1.0-150500.49.24.1
qemu-accel-qtest-7.1.0-150500.49.24.1
qemu-accel-tcg-x86-7.1.0-150500.49.24.1
qemu-arm-7.1.0-150500.49.24.1
qemu-audio-alsa-7.1.0-150500.49.24.1
qemu-audio-jack-7.1.0-150500.49.24.1
qemu-audio-oss-7.1.0-150500.49.24.1
qemu-audio-pa-7.1.0-150500.49.24.1
qemu-audio-spice-7.1.0-150500.49.24.1
qemu-block-dmg-7.1.0-150500.49.24.1
qemu-block-gluster-7.1.0-150500.49.24.1
qemu-block-nfs-7.1.0-150500.49.24.1
qemu-chardev-spice-7.1.0-150500.49.24.1
qemu-extra-7.1.0-150500.49.24.1
qemu-hw-display-qxl-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.24.1
qemu-hw-display-virtio-vga-7.1.0-150500.49.24.1
qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.24.1
qemu-hw-usb-redirect-7.1.0-150500.49.24.1
qemu-hw-usb-smartcard-7.1.0-150500.49.24.1
qemu-ivshmem-tools-7.1.0-150500.49.24.1
qemu-microvm-7.1.0-150500.49.24.1
qemu-ppc-7.1.0-150500.49.24.1
qemu-s390x-7.1.0-150500.49.24.1
qemu-seabios-1.16.0_0_gd239552-150500.49.24.1
qemu-sgabios-8-150500.49.24.1
qemu-skiboot-7.1.0-150500.49.24.1
qemu-ui-gtk-7.1.0-150500.49.24.1
qemu-ui-opengl-7.1.0-150500.49.24.1
qemu-ui-spice-app-7.1.0-150500.49.24.1
qemu-ui-spice-core-7.1.0-150500.49.24.1
qemu-vgabios-1.16.0_0_gd239552-150500.49.24.1
qemu-vhost-user-gpu-7.1.0-150500.49.24.1
qemu-x86-7.1.0-150500.49.24.1
SUSE Linux Enterprise Module for Server Applications 15 SP5
qemu-7.1.0-150500.49.24.1
qemu-SLOF-7.1.0-150500.49.24.1
qemu-accel-tcg-x86-7.1.0-150500.49.24.1
qemu-arm-7.1.0-150500.49.24.1
qemu-audio-alsa-7.1.0-150500.49.24.1
qemu-audio-dbus-7.1.0-150500.49.24.1
qemu-audio-pa-7.1.0-150500.49.24.1
qemu-audio-spice-7.1.0-150500.49.24.1
qemu-block-curl-7.1.0-150500.49.24.1
qemu-block-iscsi-7.1.0-150500.49.24.1
qemu-block-rbd-7.1.0-150500.49.24.1
qemu-block-ssh-7.1.0-150500.49.24.1
qemu-chardev-baum-7.1.0-150500.49.24.1
qemu-chardev-spice-7.1.0-150500.49.24.1
qemu-guest-agent-7.1.0-150500.49.24.1
qemu-hw-display-qxl-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.24.1
qemu-hw-display-virtio-vga-7.1.0-150500.49.24.1
qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.24.1
qemu-hw-usb-host-7.1.0-150500.49.24.1
qemu-hw-usb-redirect-7.1.0-150500.49.24.1
qemu-ipxe-1.0.0+-150500.49.24.1
qemu-ksm-7.1.0-150500.49.24.1
qemu-kvm-7.1.0-150500.49.24.1
qemu-lang-7.1.0-150500.49.24.1
qemu-ppc-7.1.0-150500.49.24.1
qemu-s390x-7.1.0-150500.49.24.1
qemu-seabios-1.16.0_0_gd239552-150500.49.24.1
qemu-sgabios-8-150500.49.24.1
qemu-skiboot-7.1.0-150500.49.24.1
qemu-ui-curses-7.1.0-150500.49.24.1
qemu-ui-dbus-7.1.0-150500.49.24.1
qemu-ui-gtk-7.1.0-150500.49.24.1
qemu-ui-opengl-7.1.0-150500.49.24.1
qemu-ui-spice-app-7.1.0-150500.49.24.1
qemu-ui-spice-core-7.1.0-150500.49.24.1
qemu-vgabios-1.16.0_0_gd239552-150500.49.24.1
qemu-x86-7.1.0-150500.49.24.1
openSUSE Leap 15.5
qemu-7.1.0-150500.49.24.1
qemu-SLOF-7.1.0-150500.49.24.1
qemu-accel-qtest-7.1.0-150500.49.24.1
qemu-accel-tcg-x86-7.1.0-150500.49.24.1
qemu-arm-7.1.0-150500.49.24.1
qemu-audio-alsa-7.1.0-150500.49.24.1
qemu-audio-dbus-7.1.0-150500.49.24.1
qemu-audio-jack-7.1.0-150500.49.24.1
qemu-audio-pa-7.1.0-150500.49.24.1
qemu-audio-spice-7.1.0-150500.49.24.1
qemu-block-curl-7.1.0-150500.49.24.1
qemu-block-dmg-7.1.0-150500.49.24.1
qemu-block-gluster-7.1.0-150500.49.24.1
qemu-block-iscsi-7.1.0-150500.49.24.1
qemu-block-nfs-7.1.0-150500.49.24.1
qemu-block-rbd-7.1.0-150500.49.24.1
qemu-block-ssh-7.1.0-150500.49.24.1
qemu-chardev-baum-7.1.0-150500.49.24.1
qemu-chardev-spice-7.1.0-150500.49.24.1
qemu-extra-7.1.0-150500.49.24.1
qemu-guest-agent-7.1.0-150500.49.24.1
qemu-hw-display-qxl-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-pci-7.1.0-150500.49.24.1
qemu-hw-display-virtio-vga-7.1.0-150500.49.24.1
qemu-hw-s390x-virtio-gpu-ccw-7.1.0-150500.49.24.1
qemu-hw-usb-host-7.1.0-150500.49.24.1
qemu-hw-usb-redirect-7.1.0-150500.49.24.1
qemu-hw-usb-smartcard-7.1.0-150500.49.24.1
qemu-ipxe-1.0.0+-150500.49.24.1
qemu-ivshmem-tools-7.1.0-150500.49.24.1
qemu-ksm-7.1.0-150500.49.24.1
qemu-kvm-7.1.0-150500.49.24.1
qemu-lang-7.1.0-150500.49.24.1
qemu-microvm-7.1.0-150500.49.24.1
qemu-ppc-7.1.0-150500.49.24.1
qemu-s390x-7.1.0-150500.49.24.1
qemu-seabios-1.16.0_0_gd239552-150500.49.24.1
qemu-sgabios-8-150500.49.24.1
qemu-skiboot-7.1.0-150500.49.24.1
qemu-tools-7.1.0-150500.49.24.1
qemu-ui-curses-7.1.0-150500.49.24.1
qemu-ui-dbus-7.1.0-150500.49.24.1
qemu-ui-gtk-7.1.0-150500.49.24.1
qemu-ui-opengl-7.1.0-150500.49.24.1
qemu-ui-spice-app-7.1.0-150500.49.24.1
qemu-ui-spice-core-7.1.0-150500.49.24.1
qemu-vgabios-1.16.0_0_gd239552-150500.49.24.1
qemu-vhost-user-gpu-7.1.0-150500.49.24.1
qemu-x86-7.1.0-150500.49.24.1
openSUSE Leap Micro 5.5
qemu-7.1.0-150500.49.24.1
qemu-accel-tcg-x86-7.1.0-150500.49.24.1
qemu-arm-7.1.0-150500.49.24.1
qemu-audio-spice-7.1.0-150500.49.24.1
qemu-block-curl-7.1.0-150500.49.24.1
qemu-chardev-spice-7.1.0-150500.49.24.1
qemu-guest-agent-7.1.0-150500.49.24.1
qemu-hw-display-qxl-7.1.0-150500.49.24.1
qemu-hw-display-virtio-gpu-7.1.0-150500.49.24.1
qemu-hw-display-virtio-vga-7.1.0-150500.49.24.1
qemu-hw-usb-redirect-7.1.0-150500.49.24.1
qemu-ipxe-1.0.0+-150500.49.24.1
qemu-s390x-7.1.0-150500.49.24.1
qemu-seabios-1.16.0_0_gd239552-150500.49.24.1
qemu-sgabios-8-150500.49.24.1
qemu-tools-7.1.0-150500.49.24.1
qemu-ui-opengl-7.1.0-150500.49.24.1
qemu-ui-spice-core-7.1.0-150500.49.24.1
qemu-vgabios-1.16.0_0_gd239552-150500.49.24.1
qemu-x86-7.1.0-150500.49.24.1

Ссылки

Описание

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

Затронутые продукты
Container suse/sle-micro/kvm-5.5:latest:qemu-guest-agent-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-SLOF-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-accel-tcg-x86-7.1.0-150500.49.24.1
Ссылки

Описание

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

Затронутые продукты
Container suse/sle-micro/kvm-5.5:latest:qemu-guest-agent-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-SLOF-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-accel-tcg-x86-7.1.0-150500.49.24.1
Ссылки

Описание

A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.

Затронутые продукты
Container suse/sle-micro/kvm-5.5:latest:qemu-guest-agent-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-SLOF-7.1.0-150500.49.24.1
SUSE Linux Enterprise Micro 5.5:qemu-accel-tcg-x86-7.1.0-150500.49.24.1
Ссылки
Уязвимость SUSE-SU-2024:3948-1