qemu - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2020-15469

  In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.

  qemu qemu qemu Debian Ubuntu Alpine
  Jul 2, 2020
• Unscored —
  CVE-2020-15859

  QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the d…

  qemu qemu qemu Debian Ubuntu Alpine
  Jul 21, 2020
• Unscored —
  CVE-2020-25084

  QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.

  qemu qemu qemu Debian Ubuntu Alpine
  Sep 25, 2020
• Unscored —
  CVE-2020-28916

  hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.

  qemu qemu qemu Debian Ubuntu Alpine
  Dec 4, 2020
• Unscored —
  CVE-2020-29130

  slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even …

  qemu libslirp libslirp libslirp Debian Ubuntu Alpine
  Nov 26, 2020
• Unscored —
  CVE-2020-29443

  ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not …

  qemu qemu qemu Debian Ubuntu Alpine
  Jan 22, 2021
• Unscored —
  CVE-2021-20181

  A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a…

  qemu qemu qemu Virtualization Debian Ubuntu Alpine
  May 13, 2021
• Unscored —
  CVE-2021-20221

  An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and …

  qemu qemu qemu Virtualization Debian Ubuntu Alpine
  May 13, 2021