CVE-2023-3354 — Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

Description

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

Affected products

Vendor	Product	Affected	Fixed
—	qemu	—	—
Red Hat	Red Hat Enterprise Linux 6	—	—
Red Hat	Red Hat Enterprise Linux 7	—	—
Red Hat	Red Hat Enterprise Linux 8	—	—
Red Hat	Red Hat Enterprise Linux 8 Advanced Virtualization	—	—
Red Hat	Red Hat Enterprise Linux 9	—	—
Red Hat	Red Hat OpenStack Platform 13 (Queens)	—	—
Fedora	Fedora	—	—
Fedora	Extra Packages for Enterprise Linux	—	—

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	qemu	1:8.0.4+dfsg-1	—
Debian 13	qemu	1:8.0.4+dfsg-1	—
Debian 12	qemu	1:7.2+dfsg-7+deb12u2	—
Debian 10	qemu	1:3.1+dfsg-8+deb10u12	DLA-3759-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 22.04 LTS	qemu	1:6.2+dfsg-2ubuntu6.16	USN-6567-1
Ubuntu 20.04 LTS	qemu	1:4.2-3ubuntu6.28	USN-6567-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro 18.04 LTS	qemu	1:2.11+dfsg-1ubuntu7.42+esm5	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	qemu-img +18	17:7.2.0-14.el9_2.5	RHSA-2023:5094
RHEL 8	SLOF	20210217-1.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	hivex +6	1.3.18-23.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	libguestfs-winsupport	8.8-2.module+el8.8.0+19817+dd5e62f6	RHSA-2023:5264
RHEL 8	libiscsi +2	1.18.0-8.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	libnbd +6	1.6.0-5.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	libtpms +1	0.9.1-2.20211126git1ff6fe1f43.module+el8.8.0+18453+1482ba89	RHSA-2023:5264
RHEL 8	libvirt +27	8.0.0-19.2.module+el8.8.0+18944+7f5acf75	RHSA-2023:5264
RHEL 8	libvirt-dbus	1.3.0-2.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	libvirt-python +1	8.0.0-2.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	nbdkit +18	1.24.0-5.module+el8.8.0+17308+05924798	RHSA-2023:5264
RHEL 8	netcf +2	0.2.8-12.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	perl-Sys-Virt	8.0.0-1.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	qemu-img +14	15:6.2.0-33.module+el8.8.0+19768+98f68f21	RHSA-2023:5264
RHEL 8	seabios +2	1.16.0-4.module+el8.8.0+19627+2d14cb21	RHSA-2023:5264
RHEL 8	sgabios +1	1:0.20170427git-3.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	supermin +1	5.2.1-2.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	swtpm +4	0.7.0-4.20211109gitb79fd91.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	virt-dib +24	1:1.44.0-9.module+el8.8.0+16781+9f4724c2	RHSA-2023:5264
RHEL 8	virt-v2v +3	1:1.42.0-22.module+el8.8.0+19067+b66cdac6	RHSA-2023:5264

Show 9 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.0 EUS	qemu-img +21	17:6.2.0-11.el9_0.8	RHSA-2023:6227
RHEL 8.6 EUS	SLOF	20210217-1.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	hivex +6	1.3.18-23.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	libguestfs-winsupport	8.6-2.module+el8.6.0+19818+47334628	RHSA-2024:0404
RHEL 8.6 EUS	libiscsi +2	1.18.0-8.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	libnbd +6	1.6.0-5.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	libtpms +1	0.9.1-1.20211126git1ff6fe1f43.module+el8.6.0+18455+e5d5ac9d	RHSA-2024:0404
RHEL 8.6 EUS	libvirt +27	8.0.0-5.10.module+el8.6.0+18949+ba4ca8a3	RHSA-2024:0404
RHEL 8.6 EUS	libvirt-dbus	1.3.0-2.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	libvirt-python +1	8.0.0-1.1.module+el8.6.0+16381+3abc475c	RHSA-2024:0404
RHEL 8.6 EUS	nbdkit +18	1.24.0-4.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	netcf +2	0.2.8-12.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	perl-Sys-Virt	8.0.0-1.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	qemu-img +14	15:6.2.0-11.module+el8.6.0+20793+2184cc28.11	RHSA-2024:0404
RHEL 8.6 EUS	seabios +2	1.15.0-2.module+el8.6.0+19580+39804e41.1	RHSA-2024:0404
RHEL 8.6 EUS	sgabios +1	1:0.20170427git-3.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	supermin +1	5.2.1-1.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	swtpm +4	0.7.0-3.20211109gitb79fd91.module+el8.6.0+16156+d5629340	RHSA-2024:0404
RHEL 8.6 EUS	virt-dib +24	1:1.44.0-5.module+el8.6.0+14480+c0a3aa0f	RHSA-2024:0404
RHEL 8.6 EUS	virt-v2v +3	1:1.42.0-19.module+el8.6.0+15577+2ffd6ffa	RHSA-2024:0404
RHEL 8.4 TUS	hivex +1	1.3.18-21.module+el8.4.0+10770+19c037f9	RHSA-2023:5796
RHEL 8.4 TUS	libguestfs +16	1:1.40.2-27.module+el8.4.0+9282+0bdec052	RHSA-2023:5796
RHEL 8.4 E4S	SLOF	20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 E4S	hivex +4	1.3.18-21.module+el8.4.0+10770+19c037f9	RHSA-2023:5796
RHEL 8.4 E4S	libguestfs-winsupport	8.4-1.module+el8.4.0+19830+486a2a6d	RHSA-2023:5796
RHEL 8.4 E4S	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 E4S	libnbd +3	1.2.2-1.module+el8.3.0+7353+9de0a3cc	RHSA-2023:5796
RHEL 8.4 E4S	libvirt +28	6.0.0-35.4.module+el8.4.0+16907+31bceb87	RHSA-2023:5796
RHEL 8.4 E4S	libvirt-dbus	1.3.0-2.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 E4S	nbdkit +13	1.16.2-4.module+el8.3.0+6922+fd575af8	RHSA-2023:5796
RHEL 8.4 E4S	netcf +2	0.2.8-12.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 E4S	perl-Sys-Virt +2	6.0.0-1.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 E4S	qemu-img +9	15:4.2.0-49.module+el8.4.0+19799+49fb6160.10	RHSA-2023:5796
RHEL 8.4 E4S	seabios +2	1.13.0-2.module+el8.3.0+7353+9de0a3cc	RHSA-2023:5796
RHEL 8.4 E4S	sgabios +1	1:0.20170427git-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 E4S	supermin +1	5.1.19-10.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 E4S	virt-dib +23	1:1.40.2-27.module+el8.4.0+9282+0bdec052	RHSA-2023:5796
RHEL 8.4 AUS	hivex +4	1.3.18-21.module+el8.4.0+10770+19c037f9	RHSA-2023:5796
RHEL 8.4 AUS	libguestfs-winsupport	8.4-1.module+el8.4.0+19830+486a2a6d	RHSA-2023:5796
RHEL 8.4 AUS	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 AUS	libnbd +3	1.2.2-1.module+el8.3.0+7353+9de0a3cc	RHSA-2023:5796
RHEL 8.4 AUS	libvirt +28	6.0.0-35.4.module+el8.4.0+16907+31bceb87	RHSA-2023:5796
RHEL 8.4 AUS	libvirt-dbus	1.3.0-2.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 AUS	nbdkit +13	1.16.2-4.module+el8.3.0+6922+fd575af8	RHSA-2023:5796
RHEL 8.4 AUS	netcf +2	0.2.8-12.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 AUS	perl-Sys-Virt +2	6.0.0-1.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 AUS	qemu-img +9	15:4.2.0-49.module+el8.4.0+19799+49fb6160.10	RHSA-2023:5796
RHEL 8.4 AUS	seabios +2	1.13.0-2.module+el8.3.0+7353+9de0a3cc	RHSA-2023:5796
RHEL 8.4 AUS	sgabios +1	1:0.20170427git-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5796
RHEL 8.4 AUS	supermin +1	5.1.19-10.module+el8.3.0+6423+e4cb6418	RHSA-2023:5796
RHEL 8.4 AUS	virt-dib +23	1:1.40.2-27.module+el8.4.0+9282+0bdec052	RHSA-2023:5796
RHEL 8.2 TUS	hivex +1	1.3.15-7.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 TUS	libguestfs +17	1:1.38.4-15.module+el8.2.0+5297+222a20af	RHSA-2023:5587
RHEL 8.2 TUS	libguestfs-winsupport	8.2-1.module+el8.2.0+19832+6b08672d	RHSA-2023:5587
RHEL 8.2 TUS	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 TUS	libvirt +17	4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	RHSA-2023:5587
RHEL 8.2 E4S	SLOF	20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	hivex +4	1.3.15-7.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	libguestfs-winsupport	8.2-1.module+el8.2.0+19832+6b08672d	RHSA-2023:5587
RHEL 8.2 E4S	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	libvirt +27	4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	RHSA-2023:5587
RHEL 8.2 E4S	libvirt-dbus	1.2.0-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	libvirt-python +1	4.5.0-2.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	nbdkit +9	1.4.2-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	netcf +2	0.2.8-12.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	perl-Sys-Virt	4.5.0-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	qemu-img +9	15:2.12.0-99.module+el8.2.0+19800+e8ec3bd8.8	RHSA-2023:5587
RHEL 8.2 E4S	seabios +2	1.11.1-4.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	sgabios +1	1:0.20170427git-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	supermin +1	5.1.19-9.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 E4S	virt-dib +23	1:1.38.4-15.module+el8.2.0+5297+222a20af	RHSA-2023:5587
RHEL 8.2 AUS	hivex +4	1.3.15-7.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	libguestfs-winsupport	8.2-1.module+el8.2.0+19832+6b08672d	RHSA-2023:5587
RHEL 8.2 AUS	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	libvirt +27	4.5.0-42.1.module+el8.2.0+14235+7beeb3f6	RHSA-2023:5587
RHEL 8.2 AUS	libvirt-dbus	1.2.0-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	libvirt-python +1	4.5.0-2.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	nbdkit +9	1.4.2-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	netcf +2	0.2.8-12.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	perl-Sys-Virt	4.5.0-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	qemu-img +9	15:2.12.0-99.module+el8.2.0+19800+e8ec3bd8.8	RHSA-2023:5587
RHEL 8.2 AUS	seabios +2	1.11.1-4.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	sgabios +1	1:0.20170427git-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	supermin +1	5.1.19-9.module+el8.1.0+4066+0f1aadab	RHSA-2023:5587
RHEL 8.2 AUS	virt-dib +23	1:1.38.4-15.module+el8.2.0+5297+222a20af	RHSA-2023:5587
RHEL 8.1 E4S	SLOF	20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	hivex +4	1.3.15-7.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	libguestfs-winsupport	8.1-1.module+el8.1.0+19834+dbdce824	RHSA-2023:5239
RHEL 8.1 E4S	libiscsi +2	1.18.0-8.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	libvirt +27	4.5.0-35.3.module+el8.1.0+5931+8897e7e1	RHSA-2023:5239
RHEL 8.1 E4S	libvirt-dbus	1.2.0-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	libvirt-python +1	4.5.0-2.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	nbdkit +9	1.4.2-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	netcf +2	0.2.8-12.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	perl-Sys-Virt	4.5.0-5.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	qemu-img +9	15:2.12.0-88.module+el8.1.0+19802+9e50ceca.6	RHSA-2023:5239
RHEL 8.1 E4S	seabios +2	1.11.1-4.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	sgabios +1	1:0.20170427git-3.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	supermin +1	5.1.19-9.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239
RHEL 8.1 E4S	virt-dib +24	1:1.38.4-14.module+el8.1.0+4066+0f1aadab	RHSA-2023:5239

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	qemu-img +18	17:7.2.0-14.el9_2.5.alma.1	ALSA-2023:5094
AlmaLinux 8	SLOF	20210217-1.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	hivex +6	1.3.18-23.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	libguestfs-winsupport	8.8-2.module_el8.8.0+3612+f18d2b89	ALSA-2023:5264
AlmaLinux 8	libiscsi +2	1.18.0-8.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	libnbd +6	1.6.0-5.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	libtpms +1	0.9.1-2.20211126git1ff6fe1f43.module_el8.8.0+3553+bd08596b	ALSA-2023:5264
AlmaLinux 8	libvirt +27	8.0.0-19.2.module_el8.8.0+3585+76b9c397.alma	ALSA-2023:5264
AlmaLinux 8	libvirt-dbus	1.3.0-2.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	nbdkit +18	1.24.0-5.module_el8.8.0+3485+7cffc4a3	ALSA-2023:5264
AlmaLinux 8	netcf +2	0.2.8-12.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	perl-Sys-Virt	8.0.0-1.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	python3-libvirt	8.0.0-2.module_el8.7.0+3346+68867adb	ALSA-2023:5264
AlmaLinux 8	qemu-img +14	15:6.2.0-33.module_el8.8.0+3612+f18d2b89.alma.1	ALSA-2023:5264
AlmaLinux 8	seabios +2	1.16.0-4.module_el8.8.0+3612+f18d2b89	ALSA-2023:5264
AlmaLinux 8	sgabios +1	1:0.20170427git-3.module_el8.6.0+2880+7d9e3703	ALSA-2023:5264
AlmaLinux 8	supermin +1	5.2.1-2.module_el8.7.0+3346+68867adb	ALSA-2023:5264
AlmaLinux 8	swtpm +4	0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb	ALSA-2023:5264
AlmaLinux 8	virt-dib +24	1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma	ALSA-2023:5264
AlmaLinux 8	virt-v2v +3	1:1.42.0-22.module_el8.8.0+3553+bd08596b	ALSA-2023:5264

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 8	hivex	1.3.18-23.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	libguestfs	1:1.44.0-9.module+el8.10.0+1590+a67ab969.rocky	RLSA-2023:5264
Rocky Linux 8	libiscsi	1.18.0-8.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	libnbd	1.6.0-5.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	libtpms	0.9.1-2.20211126git1ff6fe1f43.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	libvirt-dbus	1.3.0-2.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	libvirt-python	8.0.0-2.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	nbdkit	1.24.0-5.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	netcf	0.2.8-12.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	perl-Sys-Virt	8.0.0-1.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	seabios	1.16.0-4.module+el8.9.0+1408+7b966129	RLSA-2023:5264
Rocky Linux 8	sgabios	1:0.20170427git-3.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	supermin	5.2.1-2.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	swtpm	0.7.0-4.20211109gitb79fd91.module+el8.10.0+1590+a67ab969	RLSA-2023:5264
Rocky Linux 8	virt-v2v	1:1.42.0-22.module+el8.10.0+1590+a67ab969	RLSA-2023:5264

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP5	qemu	7.1.0-150500.49.9.2	SUSE-SU-2024:0589-1, SUSE-SU-2023:4662-1
SLES 15 SP4	qemu	6.2.0-150400.37.23.1	SUSE-SU-2023:4056-1
SLES 15 SP3	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SLES 15 SP2	qemu	4.2.1-150200.79.1	SUSE-SU-2023:3721-1
SLES 15 SP1	qemu	3.1.1.1-150100.80.51.5	SUSE-SU-2023:3800-1

Show 16 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	qemu	3.1.1.1-72.1	SUSE-SU-2024:1395-1
SLES for SAP 15 SP3	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SLES for SAP 15 SP2	qemu	4.2.1-150200.79.1	SUSE-SU-2023:3721-1
SLES for SAP 15 SP1	qemu	3.1.1.1-150100.80.51.5	SUSE-SU-2023:3800-1
SLES for SAP 12 SP5	qemu	3.1.1.1-72.1	SUSE-SU-2024:1395-1
SLE Micro 5.5	qemu	7.1.0-150500.49.9.2	SUSE-SU-2023:4662-1
SLE Micro 5.4	qemu	6.2.0-150400.37.23.1	SUSE-SU-2023:4056-1
SLE Micro 5.3	qemu	6.2.0-150400.37.23.1	SUSE-SU-2023:4056-1
SLE Micro 5.2	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SLE Micro 5.1	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SLE HPC 15 SP3	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SLE HPC 15 SP2	qemu	4.2.1-150200.79.1	SUSE-SU-2023:3721-1
SLE HPC 15 SP1	qemu	3.1.1.1-150100.80.51.5	SUSE-SU-2023:3800-1
SUSE Manager Server 4.2	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SUSE Manager Proxy 4.2	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1
SUSE Enterprise Storage 7.1	qemu	5.2.0-150300.127.3	SUSE-SU-2023:3444-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	qemu	8.0.4-1.1	openSUSE-SU-2024:13114-1
openSUSE Leap 15.5	qemu	7.1.0-150500.49.9.2	SUSE-SU-2023:4662-1
openSUSE Leap 15.4	qemu	4.2.1-150200.79.1	SUSE-SU-2023:4056-1, SUSE-SU-2023:3721-1

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	qemu	8.2.0-1	—
Azure Linux 2 (CBL-Mariner)	qemu	6.2.0-19	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	qemu-img +17	17:7.2.0-14.el9_2.5	ELSA-2023-5094
Oracle Linux 8	hivex +6	1.3.18-23.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libguestfs-winsupport	8.6-1.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libiscsi +2	1.18.0-8.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libnbd +6	1.6.0-5.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libtpms +1	0.9.1-1.20211126git1ff6fe1f43.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libvirt +27	8.0.0-19.0.2.module+el8.8.0+21112+1cc1a24b	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	libvirt-client-qemu	9.0.0-3.module+el8.8.0+21147+1292344f	ELSA-2023-12855
Oracle Linux 8	libvirt-dbus	1.3.0-2.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	nbdkit +18	1.24.0-4.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	netcf +2	0.2.8-12.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	ocaml-libguestfs +1	1:1.44.0-9.0.2.module+el8.8.0+21153+75c20b54	ELSA-2023-5264
Oracle Linux 8	perl-Sys-Virt	8.0.0-1.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	python3-libvirt	8.0.0-2.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	qemu-img +14	15:6.2.0-33.module+el8.8.0+21164+ed375313	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	qemu-virtiofsd	15:7.2.0-5.module+el8.8.0+21147+1292344f	ELSA-2023-12855
Oracle Linux 8	seabios +2	1.16.0-3.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	sgabios +1	1:0.20170427git-3.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	supermin +1	5.2.1-2.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	swtpm +4	0.7.0-4.20211109gitb79fd91.module+el8.8.0+20990+60c1530a	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	virt-dib +22	1:1.44.0-9.0.1.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264
Oracle Linux 8	virt-v2v +3	1:1.42.0-21.module+el8.8.0+21147+1292344f	ELSA-2023-12855, ELSA-2023-5264

Advisories 25

ALSA-2023:5264 Important: virt:rhel and virt-devel:rhel security and bug fix update AlmaLinux Security Advisories · Nov 2, 2026
ALSA-2023:5094 Important: qemu-kvm security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
WID-SEC-2023-1709 QEMU: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jun 29, 2026
RHSA-2024:0404 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:6227 Red Hat Security Advisory: qemu-kvm security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:5796 Red Hat Security Advisory: virt:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:5587 Red Hat Security Advisory: virt:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:5264 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:5239 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
RHSA-2023:5094 Red Hat Security Advisory: qemu-kvm security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
USN-6567-1 qemu vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
RLSA-2023:5264 Important: virt:rhel and virt-devel:rhel security and bug fix update Rocky Linux Security Advisories · Mar 23, 2026
DLA-3759-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
ELSA-2023-5264 Important: virt:ol and virt-devel:ol security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 16, 2026
SUSE-SU-2023:3721-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:0589-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:3800-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:4662-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13114-1 qemu-8.0.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:1395-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:3444-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:4056-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
NCSC-2024-0339 Kwetsbaarheden verholpen in Microsoft Mariner NCSC-NL (Netherlands) · Aug 13, 2024
ELSA-2023-12855 Important: kvm_utils3 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 7, 2023
ELSA-2023-5094 Important: qemu-kvm security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 13, 2023

CNA	v3.1	7.5
EUVD	v3.1	7.5

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Azure Linux

Oracle Linux

Advisories 25

References