qemu - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2016-5126

  Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to caus…

  qemu qemu Debian Ubuntu
  Jun 1, 2016
• Unscored —
  CVE-2016-5403

  The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of serv…

  qemu xen qemu xen Debian Ubuntu Alpine
  Aug 2, 2016
• Unscored —
  CVE-2017-9375

  QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users…

  qemu qemu Debian Ubuntu
  Jun 16, 2017
• Unscored —
  CVE-2019-12068

  In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-…

  qemu qemu Debian Ubuntu
  Sep 24, 2019
• Unscored —
  CVE-2019-12155

  interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

  qemu qemu Debian Ubuntu
  May 24, 2019
• Unscored —
  CVE-2019-13164

  qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or …

  qemu qemu Debian Ubuntu
  Jul 3, 2019
• Unscored —
  CVE-2019-14378 Public exploit EPSS 17%

  ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a ca…

  qemu android qemu slirp4netns Debian Ubuntu
  Jul 29, 2019
• Unscored —
  CVE-2019-15890

  libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

  qemu virtualbox android qemu Debian Ubuntu
  Sep 6, 2019