NULL pointer dereference in QEMU - CVE-2023-3354

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU80015

NULL pointer dereference in QEMU - CVE-2023-3354

Published: August 25, 2023


Vulnerability identifier: #VU80015
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-3354
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in NULL pointer dereference and denial of service.


Affected software

QEMU
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat CodeReady Linux Builder for Power, little endian
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Server Applications Module
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Ubuntu
Fedora
Migration Toolkit for Virtualization
OpenShift Virtualization
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
netcf
netcf-devel
netcf-libs
swtpm
swtpm-devel
swtpm-libs
swtpm-tools
swtpm-tools-pkcs11
libtpms
libtpms-devel
sgabios-bin
sgabios
qemu-ipxe
libvirt-dbus
ocaml-hivex-devel
hivex-devel
ocaml-hivex
perl-hivex
python3-hivex
ruby-hivex
hivex
python3-libnbd
libnbd-bash-completion
libnbd-devel
ocaml-libnbd-devel
ocaml-libnbd
libnbd
nbdfuse
qemu-vgabios
qemu-seabios
seabios-bin
seavgabios-bin
seabios
libiscsi-devel
libiscsi-utils
libiscsi
nbdkit-vddk-plugin
nbdkit-bash-completion
nbdkit
nbdkit-basic-filters
nbdkit-curl-plugin
nbdkit-basic-plugins
nbdkit-xz-filter
nbdkit-tmpdisk-plugin
nbdkit-tar-plugin
nbdkit-tar-filter
nbdkit-ssh-plugin
nbdkit-server
nbdkit-python-plugin
nbdkit-nbd-plugin
nbdkit-linuxdisk-plugin
nbdkit-gzip-plugin
nbdkit-gzip-filter
nbdkit-example-plugins
nbdkit-devel
libguestfs-java-devel
libguestfs-rescue
libguestfs-tools-c
libguestfs-rsync
libguestfs-java
ocaml-libguestfs-devel
perl-Sys-Guestfs
python3-libguestfs
ruby-libguestfs
libguestfs-inspect-icons
libguestfs-bash-completion
libguestfs-xfs
virt-dib
libguestfs-javadoc
libguestfs-tools
libguestfs-man-pages-uk
lua-guestfs
libguestfs-man-pages-ja
ocaml-libguestfs
libguestfs
libguestfs-gobject-devel
libguestfs-appliance
libguestfs-devel
libguestfs-gfs2
libguestfs-gobject
qemu-tools-debuginfo
qemu-x86-debuginfo
qemu-kvm
qemu-block-ssh-debuginfo
qemu
qemu-block-iscsi
qemu-ui-gtk-debuginfo
qemu-ui-curses-debuginfo
qemu-audio-pa-debuginfo
qemu-x86
qemu-audio-oss
qemu-block-rbd-debuginfo
qemu-lang
qemu-audio-alsa
qemu-block-curl-debuginfo
qemu-debuginfo
qemu-block-iscsi-debuginfo
qemu-arm
qemu-arm-debuginfo
qemu-ppc
qemu-ppc-debuginfo
qemu-s390
qemu-s390-debuginfo
qemu-guest-agent
qemu-guest-agent-debuginfo
qemu-block-ssh
qemu-ui-curses
qemu-ui-gtk
qemu-block-rbd
qemu-tools
qemu-audio-pa
qemu-debugsource
qemu-block-curl
qemu-audio-alsa-debuginfo
qemu-audio-oss-debuginfo
qemu-help
qemu-img
qemu-microvm
qemu-ui-spice-app-debuginfo
qemu-ui-spice-app
qemu-system-misc (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-hw-display-qxl-debuginfo
qemu-hw-display-virtio-gpu
qemu-ui-opengl
qemu-hw-usb-redirect-debuginfo
qemu-ui-spice-core
qemu-chardev-spice
qemu-hw-display-qxl
qemu-audio-spice
qemu-chardev-spice-debuginfo
qemu-hw-usb-redirect
qemu-audio-spice-debuginfo
qemu-ksm
qemu-hw-display-virtio-vga
qemu-hw-display-virtio-vga-debuginfo
qemu-ui-spice-core-debuginfo
qemu-chardev-baum-debuginfo
qemu-ui-opengl-debuginfo
qemu-s390x
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-s390x-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-skiboot
qemu-SLOF
qemu-hw-display-virtio-gpu-pci
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-hw-display-virtio-gpu-debuginfo
qemu-chardev-baum
supermin-devel
supermin
qemu-kvm (Red Hat package)
qemu-kvm-block-ssh
qemu-user-static
qemu-kvm-ui-spice
qemu-kvm-ui-opengl
qemu-kvm-hw-usbredir
qemu-kvm-block-gluster
qemu-kvm-tests
qemu-kvm-docs
qemu-kvm-core
qemu-kvm-block-rbd
qemu-kvm-block-iscsi
qemu-kvm-block-curl
qemu-kvm-common
qemu-system-x86_64
qemu-system-aarch64
qemu-hw-usb-host
qemu-system-arm
qemu-system-riscv
qemu-block-dmg-debuginfo
qemu-block-gluster
qemu-vhost-user-gpu
qemu-accel-qtest
qemu-block-gluster-debuginfo
qemu-extra
qemu-linux-user-debuginfo
qemu-accel-qtest-debuginfo
qemu-audio-jack-debuginfo
qemu-ivshmem-tools-debuginfo
qemu-block-dmg
qemu-hw-usb-smartcard
qemu-hw-usb-smartcard-debuginfo
qemu-accel-tcg-x86-debuginfo
qemu-block-nfs
qemu-audio-jack
qemu-extra-debuginfo
qemu-linux-user-debugsource
qemu-linux-user
qemu-vhost-user-gpu-debuginfo
qemu-ivshmem-tools
qemu-accel-tcg-x86
qemu-hw-usb-host-debuginfo
qemu-block-nfs-debuginfo
qemu-ui-dbus-debuginfo
qemu-audio-dbus-debuginfo
qemu-audio-dbus
qemu-ui-dbus
qemu-headless
qemu-system-xen (Ubuntu package)
perl-Sys-Virt
python3-libvirt
libvirt-daemon-driver-nodedev
libvirt
libvirt-client
libvirt-daemon
libvirt-daemon-config-network
libvirt-daemon-config-nwfilter
libvirt-daemon-driver-interface
libvirt-daemon-driver-network
libvirt-daemon-driver-nwfilter
libvirt-daemon-driver-qemu
libvirt-daemon-driver-secret
libvirt-daemon-driver-storage
libvirt-daemon-driver-storage-core
libvirt-daemon-driver-storage-disk
libvirt-daemon-driver-storage-iscsi
libvirt-daemon-driver-storage-gluster
libvirt-wireshark
libvirt-nss
libvirt-lock-sanlock
libvirt-libs
libvirt-docs
libvirt-devel
libvirt-daemon-kvm
libvirt-daemon-driver-storage-scsi
libvirt-daemon-driver-storage-rbd
libvirt-daemon-driver-storage-mpath
libvirt-daemon-driver-storage-logical
libvirt-daemon-driver-storage-iscsi-direct
libguestfs-winsupport
qemu-sgabios

How to mitigate CVE-2023-3354

Install updates from vendor's website.

Migration Toolkit for Virtualization - update to 2.4.3
netcf - update to 0.2.8-12
netcf-devel - update to 0.2.8-12
netcf-libs - update to 0.2.8-12
swtpm - update to 0.7.0-4.20211109gitb79fd91
swtpm-devel - update to 0.7.0-4.20211109gitb79fd91
swtpm-libs - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools - update to 0.7.0-4.20211109gitb79fd91
swtpm-tools-pkcs11 - update to 0.7.0-4.20211109gitb79fd91
libtpms - update to 0.9.1-2.20211126git1ff6fe1f43
libtpms-devel - update to 0.9.1-2.20211126git1ff6fe1f43
sgabios-bin - update to 0.20170427git-3
sgabios - update to 0.20170427git-3
qemu-ipxe - addressed in versions 1.0.0+-150100.80.51.5, 1.0.0+-150200.79.1, 1.0.0+-150300.127.3, 1.0.0+-150400.37.23.1, 1.0.0+-150500.49.9.2
libvirt-dbus - update to 1.3.0-2
ocaml-hivex-devel - update to 1.3.18-23
hivex-devel - update to 1.3.18-23
ocaml-hivex - update to 1.3.18-23
perl-hivex - update to 1.3.18-23
python3-hivex - update to 1.3.18-23
ruby-hivex - update to 1.3.18-23
hivex - update to 1.3.18-23
python3-libnbd - update to 1.6.0-5.0.1
libnbd-bash-completion - update to 1.6.0-5.0.1
libnbd-devel - update to 1.6.0-5.0.1
ocaml-libnbd-devel - update to 1.6.0-5.0.1
ocaml-libnbd - update to 1.6.0-5.0.1
libnbd - update to 1.6.0-5.0.1
nbdfuse - update to 1.6.0-5.0.1
qemu-vgabios - addressed in versions 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.127.3, 1.15.0_0_g2dd4b9b-150400.37.23.1, 1.16.0_0_gd239552-150500.49.9.2
qemu-seabios - addressed in versions 1.12.0_0_ga698c89-150100.80.51.5, 1.12.1+-150200.79.1, 1.14.0_0_g155821a-150300.127.3, 1.15.0_0_g2dd4b9b-150400.37.23.1, 1.16.0_0_gd239552-150500.49.9.2
seabios-bin - update to 1.16.0-4
seavgabios-bin - update to 1.16.0-4
seabios - update to 1.16.0-4
libiscsi-devel - update to 1.18.0-8.0.1
libiscsi-utils - update to 1.18.0-8.0.1
libiscsi - update to 1.18.0-8.0.1
nbdkit-vddk-plugin - update to 1.24.0-5
nbdkit-bash-completion - update to 1.24.0-5
nbdkit - update to 1.24.0-5
nbdkit-basic-filters - update to 1.24.0-5
nbdkit-curl-plugin - update to 1.24.0-5
nbdkit-basic-plugins - update to 1.24.0-5
nbdkit-xz-filter - update to 1.24.0-5
nbdkit-tmpdisk-plugin - update to 1.24.0-5
nbdkit-tar-plugin - update to 1.24.0-5
nbdkit-tar-filter - update to 1.24.0-5
nbdkit-ssh-plugin - update to 1.24.0-5
nbdkit-server - update to 1.24.0-5
nbdkit-python-plugin - update to 1.24.0-5
nbdkit-nbd-plugin - update to 1.24.0-5
nbdkit-linuxdisk-plugin - update to 1.24.0-5
nbdkit-gzip-plugin - update to 1.24.0-5
nbdkit-gzip-filter - update to 1.24.0-5
nbdkit-example-plugins - update to 1.24.0-5
nbdkit-devel - update to 1.24.0-5
libguestfs-java-devel - update to 1.44.0-9.0.1
libguestfs-rescue - update to 1.44.0-9.0.1
libguestfs-tools-c - update to 1.44.0-9.0.1
libguestfs-rsync - update to 1.44.0-9.0.1
libguestfs-java - update to 1.44.0-9.0.1
ocaml-libguestfs-devel - update to 1.44.0-9.0.1
perl-Sys-Guestfs - update to 1.44.0-9.0.1
python3-libguestfs - update to 1.44.0-9.0.1
ruby-libguestfs - update to 1.44.0-9.0.1
libguestfs-inspect-icons - update to 1.44.0-9.0.1
libguestfs-bash-completion - update to 1.44.0-9.0.1
libguestfs-xfs - update to 1.44.0-9.0.1
virt-dib - update to 1.44.0-9.0.1
libguestfs-javadoc - update to 1.44.0-9.0.1
libguestfs-tools - update to 1.44.0-9.0.1
libguestfs-man-pages-uk - update to 1.44.0-9.0.1
lua-guestfs - update to 1.44.0-9.0.1
libguestfs-man-pages-ja - update to 1.44.0-9.0.1
ocaml-libguestfs - update to 1.44.0-9.0.1
libguestfs - update to 1.44.0-9.0.1
libguestfs-gobject-devel - update to 1.44.0-9.0.1
libguestfs-appliance - update to 1.44.0-9.0.1
libguestfs-devel - update to 1.44.0-9.0.1
libguestfs-gfs2 - update to 1.44.0-9.0.1
libguestfs-gobject - update to 1.44.0-9.0.1
qemu-tools-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-x86-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-kvm - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-ssh-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-iscsi - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-x86 - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-oss - addressed in versions 3.1.1.1-150100.80.51.5, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-rbd-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-lang - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-alsa - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-curl-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-arm - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-arm-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ppc - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-s390 - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-s390-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1
qemu-guest-agent - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-guest-agent-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-ssh - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-curses - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-gtk - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-rbd - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-tools - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-pa - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-debugsource - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-curl - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-150100.80.51.5, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-debugsource - addressed in versions 4.1.0-76, 6.2.0-77
qemu-seabios - addressed in versions 4.1.0-76, 6.2.0-77
qemu-help - addressed in versions 4.1.0-76, 6.2.0-77
qemu-block-ssh - addressed in versions 4.1.0-76, 6.2.0-77
qemu-img - addressed in versions 4.1.0-76, 6.2.0-77
qemu-guest-agent - addressed in versions 4.1.0-76, 6.2.0-77
qemu-block-curl - addressed in versions 4.1.0-76, 6.2.0-77
qemu-block-rbd - addressed in versions 4.1.0-76, 6.2.0-77
qemu-debuginfo - addressed in versions 4.1.0-76, 6.2.0-77
qemu-block-iscsi - addressed in versions 4.1.0-76, 6.2.0-77
qemu - addressed in versions 4.1.0-76, 6.2.0-77
qemu-microvm - addressed in versions 4.2.1-150200.79.1, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-spice-app-debuginfo - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-spice-app - addressed in versions 4.2.1-150200.79.1, 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21
qemu-system (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-opengl - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-spice-core - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-chardev-spice - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-spice - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ksm - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-s390x - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-skiboot - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-SLOF - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-chardev-baum - addressed in versions 5.2.0-150300.127.3, 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
supermin-devel - update to 5.2.1-2.0.2
supermin - update to 5.2.1-2.0.2
qemu-kvm (Red Hat package) - addressed in versions 6.2.0-11.el9_0.8, 7.2.0-14.el9_2.5
qemu-kvm-block-ssh - update to 6.2.0-33.0.2
qemu-guest-agent - update to 6.2.0-33.0.2
qemu-user-static - update to 6.2.0-33.0.2
qemu-kvm-ui-spice - update to 6.2.0-33.0.2
qemu-kvm-ui-opengl - update to 6.2.0-33.0.2
qemu-kvm-hw-usbredir - update to 6.2.0-33.0.2
qemu-kvm-block-gluster - update to 6.2.0-33.0.2
qemu-kvm-tests - update to 6.2.0-33.0.2
qemu-kvm-docs - update to 6.2.0-33.0.2
qemu-kvm-core - update to 6.2.0-33.0.2
qemu-kvm-block-rbd - update to 6.2.0-33.0.2
qemu-kvm-block-iscsi - update to 6.2.0-33.0.2
qemu-kvm-block-curl - update to 6.2.0-33.0.2
qemu-kvm - update to 6.2.0-33.0.2
qemu-img - update to 6.2.0-33.0.2
qemu-kvm-common - update to 6.2.0-33.0.2
qemu-system-x86_64 - update to 6.2.0-77
qemu-system-aarch64 - update to 6.2.0-77
qemu-hw-usb-host - update to 6.2.0-77
qemu-system-arm - update to 6.2.0-77
qemu-system-riscv - update to 6.2.0-77
qemu-block-dmg-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-gluster - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-vhost-user-gpu - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-accel-qtest - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-gluster-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-extra - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-linux-user-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.1
qemu-accel-qtest-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-host - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-jack-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ivshmem-tools-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-dmg - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-smartcard - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-smartcard-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-accel-tcg-x86-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-nfs - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-audio-jack - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-extra-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-linux-user-debugsource - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.1
qemu-linux-user - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.1
qemu-vhost-user-gpu-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ivshmem-tools - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-accel-tcg-x86 - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-hw-usb-host-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-block-nfs-debuginfo - addressed in versions 6.2.0-150400.37.23.1, 7.1.0-150500.49.9.2
qemu-ui-dbus-debuginfo - update to 7.1.0-150500.49.9.2
qemu-audio-dbus-debuginfo - update to 7.1.0-150500.49.9.2
qemu-audio-dbus - update to 7.1.0-150500.49.9.2
qemu-ui-dbus - update to 7.1.0-150500.49.9.2
qemu-headless - update to 7.1.0-150500.49.9.2
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu - update to 7.2.5-1.fc38
perl-Sys-Virt - update to 8.0.0-1
python3-libvirt - update to 8.0.0-2
libvirt-daemon-driver-nodedev - update to 8.0.0-21
libvirt - update to 8.0.0-21
libvirt-client - update to 8.0.0-21
libvirt-daemon - update to 8.0.0-21
libvirt-daemon-config-network - update to 8.0.0-21
libvirt-daemon-config-nwfilter - update to 8.0.0-21
libvirt-daemon-driver-interface - update to 8.0.0-21
libvirt-daemon-driver-network - update to 8.0.0-21
libvirt-daemon-driver-nwfilter - update to 8.0.0-21
libvirt-daemon-driver-qemu - update to 8.0.0-21
libvirt-daemon-driver-secret - update to 8.0.0-21
libvirt-daemon-driver-storage - update to 8.0.0-21
libvirt-daemon-driver-storage-core - update to 8.0.0-21
libvirt-daemon-driver-storage-disk - update to 8.0.0-21
libvirt-daemon-driver-storage-iscsi - update to 8.0.0-21
libvirt-daemon-driver-storage-gluster - update to 8.0.0-21
libvirt-wireshark - update to 8.0.0-21
libvirt-nss - update to 8.0.0-21
libvirt-lock-sanlock - update to 8.0.0-21
libvirt-libs - update to 8.0.0-21
libvirt-docs - update to 8.0.0-21
libvirt-devel - update to 8.0.0-21
libvirt-daemon-kvm - update to 8.0.0-21
libvirt-daemon-driver-storage-scsi - update to 8.0.0-21
libvirt-daemon-driver-storage-rbd - update to 8.0.0-21
libvirt-daemon-driver-storage-mpath - update to 8.0.0-21
libvirt-daemon-driver-storage-logical - update to 8.0.0-21
libvirt-daemon-driver-storage-iscsi-direct - update to 8.0.0-21
libguestfs-winsupport - update to 8.8-2
qemu-sgabios - addressed in versions 8-150100.80.51.5, 8-150200.79.1, 8-150300.127.3, 8-150400.37.23.1, 8-150500.49.9.2

External References

Related Security Bulletins