ELSA-2021-9638 — Important: qemu security update (Oracle Linux 7)

Fixed packages 12

Release	Package	Fixed in
Oracle Linux · 7	qemu	15:4.2.1-13.el7
Oracle Linux · 7	qemu-block-gluster	15:4.2.1-13.el7
Oracle Linux · 7	qemu-block-iscsi	15:4.2.1-13.el7
Oracle Linux · 7	qemu-block-rbd	15:4.2.1-13.el7
Oracle Linux · 7	qemu-common	15:4.2.1-13.el7
Oracle Linux · 7	qemu-img	15:4.2.1-13.el7
Oracle Linux · 7	qemu-kvm	15:4.2.1-13.el7
Oracle Linux · 7	qemu-kvm-core	15:4.2.1-13.el7
Oracle Linux · 7	qemu-system-aarch64	15:4.2.1-13.el7
Oracle Linux · 7	qemu-system-aarch64-core	15:4.2.1-13.el7
Oracle Linux · 7	qemu-system-x86	15:4.2.1-13.el7
Oracle Linux · 7	qemu-system-x86-core	15:4.2.1-13.el7

Vulnerabilities 10

Unscored —

CVE-2020-29129

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i…

qemu libslirp libslirp libslirp Debian Ubuntu Alpine

Nov 26, 2020
Unscored —

CVE-2020-29130

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even …

qemu libslirp libslirp libslirp Debian Ubuntu Alpine

Nov 26, 2020
Unscored —

CVE-2021-20257

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx…

qemu qemu qemu qemu Virtualization Debian Ubuntu Azure Linux Alpine

Mar 16, 2022
Unscored —

CVE-2021-3592

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

qemu qemu libslirp libslirp Virtualization Debian Ubuntu Alpine

Jun 15, 2021
Unscored —

CVE-2021-3593

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

qemu qemu libslirp libslirp Virtualization Debian Ubuntu Alpine

Jun 15, 2021
Unscored —

CVE-2021-3594

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

qemu qemu libslirp libslirp Virtualization Debian Ubuntu Alpine

Jun 15, 2021
Unscored —

CVE-2021-3595

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

qemu qemu libslirp libslirp Virtualization Debian Ubuntu Alpine

Jun 15, 2021
Unscored —

CVE-2021-3682

A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping…

qemu qemu qemu qemu Virtualization Debian Ubuntu Azure Linux Alpine

Aug 5, 2021
Unscored —

CVE-2021-3713

An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.…

qemu qemu qemu qemu Virtualization Debian Ubuntu Azure Linux Alpine

Aug 25, 2021
Unscored —

CVE-2021-3930

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT command…

qemu qemu qemu qemu Virtualization Debian Ubuntu Azure Linux Alpine

Feb 18, 2022

Important: qemu security update (Oracle Linux 7)

Fixed packages 12

Vulnerabilities 10

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even i…

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even …

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx…

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in th…

A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping…

An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.…

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT command…