Описание
Security update for qemu
This update for qemu fixes the following issues:
- CVE-2020-13253: Fixed an OOB access that could crash the guest resulting in DoS (bsc#1172033)
- CVE-2021-20196: Fixed null pointer dereference that may lead to guest crash (bsc#1181361).
Список пакетов
openSUSE Leap 15.4
qemu-s390-4.2.1-11.34.2
Ссылки
- E-Mail link for openSUSE-SU-2022:0210-2
- SUSE Security Ratings
- SUSE Bug 1172033
- SUSE Bug 1181361
- SUSE CVE CVE-2020-13253 page
- SUSE CVE CVE-2021-20196 page
Описание
sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
Затронутые продукты
openSUSE Leap 15.4:qemu-s390-4.2.1-11.34.2
Ссылки
- CVE-2020-13253
- SUSE Bug 1172033
Описание
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Затронутые продукты
openSUSE Leap 15.4:qemu-s390-4.2.1-11.34.2
Ссылки
- CVE-2021-20196
- SUSE Bug 1181361