Out-of-bounds read in QEMU - CVE-2023-1544

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU85831

Out-of-bounds read in QEMU - CVE-2023-1544

Published: January 26, 2024


Vulnerability identifier: #VU85831
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-1544
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition within the pvrdma_ring_next_elem_read() function in the QEMU implementation of VMWare's paravirtual RDMA device. A local user can trigger an out-of-bounds read error and perform a denial of service (DoS) attack.


Affected software

QEMU
SUSE Linux Enterprise Server 12 SP5
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Manager Retail Branch Server 4.3
SUSE Manager Proxy 4.3
Gentoo Linux
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
Basesystem Module
Server Applications Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Ubuntu
qemu-ipxe
qemu-vgabios
qemu-seabios
qemu-block-iscsi
qemu-guest-agent-debuginfo
qemu-ui-gtk-debuginfo
qemu-block-ssh-debuginfo
qemu-block-curl
qemu-tools-debuginfo
qemu-ui-sdl
qemu-audio-pa
qemu-audio-alsa
qemu-audio-alsa-debuginfo
qemu-block-ssh
qemu-audio-oss
qemu-ui-curses
qemu-debugsource
qemu-guest-agent
qemu-audio-sdl-debuginfo
qemu-audio-oss-debuginfo
qemu-block-curl-debuginfo
qemu-ui-curses-debuginfo
qemu-lang
qemu
qemu-ppc
qemu-ui-sdl-debuginfo
qemu-tools
qemu-arm
qemu-arm-debuginfo
qemu-block-rbd
qemu-s390
qemu-block-rbd-debuginfo
qemu-kvm
qemu-block-iscsi-debuginfo
qemu-s390-debuginfo
qemu-ui-gtk
qemu-x86
qemu-ppc-debuginfo
qemu-audio-pa-debuginfo
qemu-audio-sdl
qemu-help
qemu-img
qemu-debuginfo
qemu-system (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-system-sparc (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-hw-s390x-virtio-gpu-ccw
qemu-extra-debuginfo
qemu-vhost-user-gpu-debuginfo
qemu-block-nfs
qemu-linux-user-debugsource
qemu-ui-spice-app-debuginfo
qemu-hw-display-qxl
qemu-ksm
qemu-x86-debuginfo
qemu-chardev-spice
qemu-hw-display-virtio-gpu-debuginfo
qemu-linux-user-debuginfo
qemu-s390x
qemu-hw-display-virtio-gpu-pci
qemu-block-dmg
qemu-extra
qemu-ui-opengl-debuginfo
qemu-block-dmg-debuginfo
qemu-hw-usb-redirect-debuginfo
qemu-hw-usb-smartcard-debuginfo
qemu-ui-opengl
qemu-ui-spice-app
qemu-audio-spice-debuginfo
qemu-hw-display-virtio-gpu-pci-debuginfo
qemu-chardev-spice-debuginfo
qemu-hw-display-qxl-debuginfo
qemu-chardev-baum-debuginfo
qemu-ivshmem-tools-debuginfo
qemu-block-gluster
qemu-s390x-debuginfo
qemu-ui-spice-core
qemu-hw-usb-smartcard
qemu-skiboot
qemu-SLOF
qemu-microvm
qemu-chardev-baum
qemu-linux-user
qemu-vhost-user-gpu
qemu-hw-usb-redirect
qemu-audio-spice
qemu-block-gluster-debuginfo
qemu-block-nfs-debuginfo
qemu-ui-spice-core-debuginfo
qemu-hw-display-virtio-vga-debuginfo
qemu-hw-s390x-virtio-gpu-ccw-debuginfo
qemu-hw-display-virtio-vga
qemu-ivshmem-tools
qemu-hw-display-virtio-gpu
qemu-testsuite
qemu-system-x86_64
qemu-system-riscv
qemu-system-arm
qemu-hw-usb-host
qemu-system-aarch64
qemu-accel-tcg-x86
qemu-accel-tcg-x86-debuginfo
qemu-hw-usb-host-debuginfo
qemu-accel-qtest-debuginfo
qemu-audio-jack-debuginfo
qemu-accel-qtest
qemu-audio-jack
qemu-audio-dbus
qemu-ui-dbus-debuginfo
qemu-ui-dbus
qemu-headless
qemu-audio-dbus-debuginfo
qemu-system-xen (Ubuntu package)
app-emulation/qemu
qemu-sgabios

How to mitigate CVE-2023-1544

Install updates from vendor's website.

qemu-ipxe - addressed in versions 1.0.0+-81.1, 1.0.0+-150300.138.1, 1.0.0+-150400.37.46.1, 1.0.0+-150500.49.12.1
qemu-vgabios - addressed in versions 1.12.0_0_ga698c89-81.1, 1.14.0_0_g155821a-150300.138.1, 1.15.0_0_g2dd4b9b-150400.37.46.1, 1.16.0_0_gd239552-150500.49.12.1
qemu-seabios - addressed in versions 1.12.0_0_ga698c89-81.1, 1.14.0_0_g155821a-150300.138.1, 1.15.0_0_g2dd4b9b-150400.37.46.1, 1.16.0_0_gd239552-150500.49.12.1
qemu-block-iscsi - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-guest-agent-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-gtk-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-ssh-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-curl - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-tools-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-sdl - update to 3.1.1.1-81.1
qemu-audio-pa - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-alsa - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-alsa-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-ssh - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-oss - addressed in versions 3.1.1.1-81.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-curses - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-debugsource - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-guest-agent - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-sdl-debuginfo - update to 3.1.1.1-81.1
qemu-audio-oss-debuginfo - addressed in versions 3.1.1.1-81.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-curl-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-curses-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-lang - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ppc - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-sdl-debuginfo - update to 3.1.1.1-81.1
qemu-tools - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-arm - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-arm-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-rbd - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-s390 - update to 3.1.1.1-81.1
qemu-block-rbd-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-kvm - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-iscsi-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-s390-debuginfo - update to 3.1.1.1-81.1
qemu-ui-gtk - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-x86 - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ppc-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-pa-debuginfo - addressed in versions 3.1.1.1-81.1, 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-sdl - update to 3.1.1.1-81.1
qemu-block-iscsi - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-seabios - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-help - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-guest-agent - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-debugsource - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-block-ssh - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-img - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-block-curl - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-debuginfo - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-block-rbd - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu - addressed in versions 4.1.0-77, 4.1.0-81, 6.2.0-83, 6.2.0-86
qemu-system (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-arm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-mips (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-ppc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-s390x (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-sparc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21
qemu (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:6.2+dfsg-2ubuntu6.16
qemu-system-misc (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-system-x86 (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.28, 1:4.2-3ubuntu6.29, 1:6.2+dfsg-2ubuntu6.16, 1:6.2+dfsg-2ubuntu6.21, 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
qemu-hw-s390x-virtio-gpu-ccw - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-extra-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-vhost-user-gpu-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-nfs - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-linux-user-debugsource - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-spice-app-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-qxl - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ksm - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-x86-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-chardev-spice - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-gpu-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-linux-user-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-s390x - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-gpu-pci - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-dmg - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-extra - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-opengl-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-dmg-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-redirect-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-smartcard-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-opengl - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-spice-app - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-spice-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-gpu-pci-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-chardev-spice-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-qxl-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-chardev-baum-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ivshmem-tools-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-gluster - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-s390x-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-spice-core - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-smartcard - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-skiboot - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-SLOF - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-microvm - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-chardev-baum - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-linux-user - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-vhost-user-gpu - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-redirect - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-spice - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-gluster-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-block-nfs-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ui-spice-core-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-vga-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-s390x-virtio-gpu-ccw-debuginfo - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-vga - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-ivshmem-tools - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-display-virtio-gpu - addressed in versions 5.2.0-150300.138.1, 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-testsuite - update to 5.2.0-150300.138.2
qemu-system-x86_64 - addressed in versions 6.2.0-83, 6.2.0-86
qemu-system-riscv - addressed in versions 6.2.0-83, 6.2.0-86
qemu-system-arm - addressed in versions 6.2.0-83, 6.2.0-86
qemu-hw-usb-host - addressed in versions 6.2.0-83, 6.2.0-86
qemu-system-aarch64 - addressed in versions 6.2.0-83, 6.2.0-86
qemu-accel-tcg-x86 - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-accel-tcg-x86-debuginfo - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-host - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-hw-usb-host-debuginfo - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-accel-qtest-debuginfo - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-jack-debuginfo - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-accel-qtest - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-jack - addressed in versions 6.2.0-150400.37.46.1, 7.1.0-150500.49.12.1
qemu-audio-dbus - update to 7.1.0-150500.49.12.1
qemu-ui-dbus-debuginfo - update to 7.1.0-150500.49.12.1
qemu-ui-dbus - update to 7.1.0-150500.49.12.1
qemu-headless - update to 7.1.0-150500.49.12.1
qemu-audio-dbus-debuginfo - update to 7.1.0-150500.49.12.1
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.2+dfsg-5ubuntu2.4, 1:8.0.4+dfsg-1ubuntu3.23.10.2
app-emulation/qemu - update to 8.0.0
qemu-sgabios - addressed in versions 8-81.1, 8-150300.138.1, 8-150400.37.46.1, 8-150500.49.12.1

External References

Related Security Bulletins