Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2861: 9pfs: prevent opening special files: A malicious client could potentially escape from the exported 9p tree by creating and opening a device file on host side. CVE-2021-3416: A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ivshmem-tools | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-audio-alsa | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-audio-oss | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-audio-pa | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-audio-sdl | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-curl | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-dmg | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-iscsi | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-nfs | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-rbd | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-block-ssh | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-common | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-debuginfo | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-guest-agent | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-img | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-kvm | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-kvm-core | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-system-aarch64 | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-system-aarch64-core | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-system-x86 | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-system-x86-core | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-ui-curses | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-ui-gtk | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-ui-sdl | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-user | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-user-binfmt | 10:3.1.0-8.amzn2.0.11 |
| Amazon Linux · 2 | qemu-user-static | 10:3.1.0-8.amzn2.0.11 |
Vulnerabilities 2
-
Medium 6.0
Qemu: 9pfs: improper access control on special files
A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a dev…
-
Unscored —
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and inc…