qemu regression

USN-8412-1 fixed vulnerabilities QEMU. On Ubuntu 20.04 LTS, the fix for
CVE-2024-4467 was incomplete and prevented the creation of boot volumes
from qcow2 images. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the
iSCSI block driver in QEMU incorrectly handled certain responses from an
iSCSI server. A remote attacker could possibly use this issue to cause
QEMU to crash, resulting in a denial of service, or possibly execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)

It was discovered that the iSCSI block driver in QEMU incorrectly handled
certain memory operations, leading to a heap-based buffer over-read. An
attacker could possibly use this issue to expose sensitive information
from the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947)

Ziming Zhang discovered that the SM501 display driver in QEMU contained an
integer overflow. A local attacker could possibly use this issue to cause
QEMU to crash, resulting in a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2020-12829)

Gaoning Pan and Xingwei Li discovered that the USB xHCI controller
implementation in QEMU contained an infinite loop. An attacker inside the
guest could possibly use this issue to cause QEMU to hang, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04
LTS, and Ubuntu 18.04 LTS. (CVE-2020-14394)

Lei Sun discovered that QEMU incorrectly handled certain MemoryRegionOps
objects, leading to a NULL pointer dereference. An attacker inside the
guest could possibly use this issue to cause QEMU to crash, resulting in a
denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu
16.04 LTS. (CVE-2020-15469)

Alexander Bulekov discovered that the e1000e network device implementation
in QEMU contained a use-after-free. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-15859)

Ziming Zhang discovered that the XGMAC Ethernet controller in QEMU
contained a buffer overflow. An attacker inside the guest could possibly
use this issue to cause QEMU to crash, resulting in a denial of service,
or possibly execute arbitrary code. This issue only affected Ubuntu 14.04
LTS. (CVE-2020-15863)

Alexander Bulekov discovered that the SDHCI device emulation in QEMU
contained a heap-based buffer overflow. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service, or possibly execute arbitrary code. This issue only affected
Ubuntu 14.04 LTS. (CVE-2020-17380)

Sergej Schumilo, Cornelius Aschermann, and Simon Wörner discovered that
the USB xHCI controller implementation in QEMU did not check a return
value, leading to a use-after-free. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25084)

Gaoning Pan, Yongkang Jia, and Yi Ren discovered that the USB OHCI
controller implementation in QEMU contained a stack-based buffer over-
read. An attacker inside the guest could possibly use this issue to cause
QEMU to crash, resulting in a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2020-25624)

It was discovered that the USB OHCI controller implementation in QEMU
contained an infinite loop. An attacker inside the guest could possibly
use this issue to cause QEMU to consume resources, resulting in a denial
of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-25625)

Cheolwoo Myung discovered that the USB EHCI emulation in QEMU did not
handle DMA memory map failures, leading to a reachable assertion. An
attacker inside the guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. This issue only affected Ubuntu
14.04 LTS. (CVE-2020-25723)

Gaoning Pan discovered that the network device emulation in QEMU could be
made to trigger an assertion failure when processing packets that lacked a
valid layer 3 protocol. An attacker inside the guest could possibly use
this issue to cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS. (CVE-2020-27617)

Wenxiang Qian discovered that the ATAPI emulation in QEMU did not properly
validate a buffer index, leading to an out-of-bounds read. An attacker
inside the guest could possibly use this issue to expose sensitive
information or cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS. (CVE-2020-29443)

Cheolwoo Myung discovered that the ESP SCSI emulation in QEMU contained a
NULL pointer dereference. An attacker inside the guest could possibly use
this issue to cause QEMU to crash, resulting in a denial of service. This
issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2020-35504)

Cheolwoo Myung discovered that the am53c974 SCSI host bus adapter
emulation in QEMU contained a NULL pointer dereference. An attacker inside
the guest could possibly use this issue to cause QEMU to crash, resulting
in a denial of service. This issue only affected Ubuntu 14.04 LTS and
Ubuntu 16.04 LTS. (CVE-2020-35505)

It was discovered that the SDHCI controller emulation in QEMU contained
out-of-bounds read and write issues. An attacker inside the guest could
possibly use this issue to cause QEMU to crash, resulting in a denial of
service, or possibly execute arbitrary code. This issue only affected
Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2021-3409)

It was discovered that several network device emulations in QEMU contained
an infinite loop when operating in loopback mode. An attacker inside the
guest could possibly use this issue to cause QEMU to crash, resulting in a
d