Division by zero in QEMU - CVE-2023-42467

Vulnerability identifier: #VU85828

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-42467

CWE-ID: CWE-369

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to a division by zero error within the scsi_disk_reset() function in hw/scsi/scsi-disk.c. A local user can pass specially crafted data to the application and crash it.

QEMU
SUSE Linux Enterprise Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
openSUSE Leap
Ubuntu
Juniper Junos Space
qemu-ipxe
qemu-vgabios
qemu-seabios
qemu-system-mips (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-audio-oss
qemu-ui-gtk
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-ui-spice-app-debuginfo
qemu-extra
qemu-block-ssh
qemu-audio-pa-debuginfo
qemu-accel-qtest
qemu-audio-alsa-debuginfo
qemu-vhost-user-gpu
qemu-ui-spice-app
qemu-audio-jack
qemu-block-curl-debuginfo
qemu-accel-qtest-debuginfo
qemu-block-dmg
qemu-ksm
qemu-ivshmem-tools
qemu-vhost-user-gpu-debuginfo
qemu-ui-curses
qemu-chardev-baum
qemu-ui-dbus
qemu-hw-usb-smartcard-debuginfo
qemu-audio-dbus
qemu-linux-user
qemu-chardev-baum-debuginfo
qemu-linux-user-debuginfo
qemu-audio-pa
qemu-accel-tcg-x86-debuginfo
qemu-audio-jack-debuginfo
qemu-block-rbd-debuginfo
qemu-block-rbd
qemu-skiboot
qemu-lang
qemu-microvm
qemu-kvm
qemu-audio-dbus-debuginfo
qemu-ui-dbus-debuginfo
qemu-audio-alsa
qemu-block-nfs-debuginfo
qemu-ivshmem-tools-debuginfo
qemu-audio-oss-debuginfo
qemu-hw-s390x-virtio-gpu-ccw
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-block-nfs
qemu-block-gluster-debuginfo
qemu-ui-curses-debuginfo
qemu-headless
qemu-block-iscsi-debuginfo
qemu-linux-user-debugsource
qemu-block-dmg-debuginfo
qemu-hw-usb-host-debuginfo
qemu-hw-usb-smartcard
qemu-block-ssh-debuginfo
qemu-block-iscsi
qemu-hw-usb-host
qemu-block-gluster
qemu-ui-gtk-debuginfo
qemu-hw-display-virtio-gpu-pci
qemu-extra-debuginfo
qemu-hw-display-qxl
qemu-tools
qemu-debugsource
qemu-audio-spice
qemu-hw-display-virtio-gpu
qemu-hw-usb-redirect-debuginfo
qemu-guest-agent-debuginfo
qemu-ui-opengl-debuginfo
qemu-chardev-spice
qemu-x86-debuginfo
qemu-hw-usb-redirect
qemu-audio-spice-debuginfo
qemu-debuginfo
qemu-hw-display-virtio-vga
qemu-chardev-spice-debuginfo
qemu-guest-agent
qemu-block-curl
qemu-ui-spice-core
qemu-ui-spice-core-debuginfo
qemu-x86
qemu-accel-tcg-x86
qemu-s390x-debuginfo
qemu-s390x
qemu-ppc
qemu-ppc-debuginfo
qemu-SLOF
qemu-arm
qemu-hw-display-qxl-debuginfo
qemu-arm-debuginfo
qemu-tools-debuginfo
qemu-ui-opengl
qemu-hw-display-virtio-vga-debuginfo
qemu
qemu-hw-display-virtio-gpu-debuginfo
qemu-system-xen (Ubuntu package)
qemu-kvm (Red Hat package)
qemu-sgabios
Red Hat OpenStack

Install update from vendor's website.

Juniper Junos Space - update to 24.1R2
qemu-ipxe - update to 1.0.0+-150500.49.30.1
qemu-vgabios - update to 1.16.0_0_gd239552-150500.49.30.1
qemu-seabios - update to 1.16.0_0_gd239552-150500.49.30.1
qemu-system-mips (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-misc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16
qemu-system (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21
qemu-audio-oss - update to 7.1.0-150500.49.30.1
qemu-ui-gtk - update to 7.1.0-150500.49.30.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-spice-app-debuginfo - update to 7.1.0-150500.49.30.1
qemu-extra - update to 7.1.0-150500.49.30.1
qemu-block-ssh - update to 7.1.0-150500.49.30.1
qemu-audio-pa-debuginfo - update to 7.1.0-150500.49.30.1
qemu-accel-qtest - update to 7.1.0-150500.49.30.1
qemu-audio-alsa-debuginfo - update to 7.1.0-150500.49.30.1
qemu-vhost-user-gpu - update to 7.1.0-150500.49.30.1
qemu-ui-spice-app - update to 7.1.0-150500.49.30.1
qemu-audio-jack - update to 7.1.0-150500.49.30.1
qemu-block-curl-debuginfo - update to 7.1.0-150500.49.30.1
qemu-accel-qtest-debuginfo - update to 7.1.0-150500.49.30.1
qemu-block-dmg - update to 7.1.0-150500.49.30.1
qemu-ksm - update to 7.1.0-150500.49.30.1
qemu-ivshmem-tools - update to 7.1.0-150500.49.30.1
qemu-vhost-user-gpu-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-curses - update to 7.1.0-150500.49.30.1
qemu-chardev-baum - update to 7.1.0-150500.49.30.1
qemu-ui-dbus - update to 7.1.0-150500.49.30.1
qemu-hw-usb-smartcard-debuginfo - update to 7.1.0-150500.49.30.1
qemu-audio-dbus - update to 7.1.0-150500.49.30.1
qemu-linux-user - update to 7.1.0-150500.49.30.1
qemu-chardev-baum-debuginfo - update to 7.1.0-150500.49.30.1
qemu-linux-user-debuginfo - update to 7.1.0-150500.49.30.1
qemu-audio-pa - update to 7.1.0-150500.49.30.1
qemu-accel-tcg-x86-debuginfo - update to 7.1.0-150500.49.30.1
qemu-audio-jack-debuginfo - update to 7.1.0-150500.49.30.1
qemu-block-rbd-debuginfo - update to 7.1.0-150500.49.30.1
qemu-block-rbd - update to 7.1.0-150500.49.30.1
qemu-skiboot - update to 7.1.0-150500.49.30.1
qemu-lang - update to 7.1.0-150500.49.30.1
qemu-microvm - update to 7.1.0-150500.49.30.1
qemu-kvm - update to 7.1.0-150500.49.30.1
qemu-audio-dbus-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-dbus-debuginfo - update to 7.1.0-150500.49.30.1
qemu-audio-alsa - update to 7.1.0-150500.49.30.1
qemu-block-nfs-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ivshmem-tools-debuginfo - update to 7.1.0-150500.49.30.1
qemu-audio-oss-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-s390x-virtio-gpu-ccw - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-gpu-pci-debuginfo - update to 7.1.0-150500.49.30.1
qemu-block-nfs - update to 7.1.0-150500.49.30.1
qemu-block-gluster-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-curses-debuginfo - update to 7.1.0-150500.49.30.1
qemu-headless - update to 7.1.0-150500.49.30.1
qemu-block-iscsi-debuginfo - update to 7.1.0-150500.49.30.1
qemu-linux-user-debugsource - update to 7.1.0-150500.49.30.1
qemu-block-dmg-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-usb-host-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-usb-smartcard - update to 7.1.0-150500.49.30.1
qemu-block-ssh-debuginfo - update to 7.1.0-150500.49.30.1
qemu-block-iscsi - update to 7.1.0-150500.49.30.1
qemu-hw-usb-host - update to 7.1.0-150500.49.30.1
qemu-block-gluster - update to 7.1.0-150500.49.30.1
qemu-ui-gtk-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-gpu-pci - update to 7.1.0-150500.49.30.1
qemu-extra-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-display-qxl - update to 7.1.0-150500.49.30.1
qemu-tools - update to 7.1.0-150500.49.30.1
qemu-debugsource - update to 7.1.0-150500.49.30.1
qemu-audio-spice - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-gpu - update to 7.1.0-150500.49.30.1
qemu-hw-usb-redirect-debuginfo - update to 7.1.0-150500.49.30.1
qemu-guest-agent-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-opengl-debuginfo - update to 7.1.0-150500.49.30.1
qemu-chardev-spice - update to 7.1.0-150500.49.30.1
qemu-x86-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-usb-redirect - update to 7.1.0-150500.49.30.1
qemu-audio-spice-debuginfo - update to 7.1.0-150500.49.30.1
qemu-debuginfo - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-vga - update to 7.1.0-150500.49.30.1
qemu-chardev-spice-debuginfo - update to 7.1.0-150500.49.30.1
qemu-guest-agent - update to 7.1.0-150500.49.30.1
qemu-block-curl - update to 7.1.0-150500.49.30.1
qemu-ui-spice-core - update to 7.1.0-150500.49.30.1
qemu-ui-spice-core-debuginfo - update to 7.1.0-150500.49.30.1
qemu-x86 - update to 7.1.0-150500.49.30.1
qemu-accel-tcg-x86 - update to 7.1.0-150500.49.30.1
qemu-s390x-debuginfo - update to 7.1.0-150500.49.30.1
qemu-s390x - update to 7.1.0-150500.49.30.1
qemu-ppc - update to 7.1.0-150500.49.30.1
qemu-ppc-debuginfo - update to 7.1.0-150500.49.30.1
qemu-SLOF - update to 7.1.0-150500.49.30.1
qemu-arm - update to 7.1.0-150500.49.30.1
qemu-hw-display-qxl-debuginfo - update to 7.1.0-150500.49.30.1
qemu-arm-debuginfo - update to 7.1.0-150500.49.30.1
qemu-tools-debuginfo - update to 7.1.0-150500.49.30.1
qemu-ui-opengl - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-vga-debuginfo - update to 7.1.0-150500.49.30.1
qemu - update to 7.1.0-150500.49.30.1
qemu-hw-display-virtio-gpu-debuginfo - update to 7.1.0-150500.49.30.1
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-kvm (Red Hat package) - update to 8.2.0-11.el9_4
qemu-sgabios - update to 8-150500.49.30.1
Red Hat OpenStack - update to 17.1

• https://gitlab.com/qemu-project/qemu/-/issues/1813
• https://gitlab.com/qemu-project/qemu/-/commit/7cfcc79b0ab800959716738aff9419f53fc68c9c
• https://security.netapp.com/advisory/ntap-20231103-0005/

• Denial of service in QEMU
• Ubuntu update for qemu
• Red Hat Enterprise Linux 9 update for qemu-kvm
• Ubuntu update for qemu
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Multiple vulnerabilities in Junos Space
• SUSE update for qemu