A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Oct 1, 2024 | Feb 18, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 18, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade qemu-kvm-coreUpgrade seavgabios-binUpgrade nbdkit-curl-pluginUpgrade libguestfs-gobjectUpgrade nbdkit-basic-filtersUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-rbdUpgrade libvirt-nssUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-system-x86Upgrade hivexUpgrade qemu-kvm-block-glusterUpgrade nbdkit-python-pluginUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libnbdUpgrade nbdkit-develUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-sshUpgrade qemu-system-aarch64Upgrade ruby-hivexUpgrade libguestfs-winsupportUpgrade python3-libguestfsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-interfaceUpgrade sgabiosUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade nbdkit-gzip-pluginUpgrade nbdkit-serverUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-diskUpgrade qemuUpgrade perl-hivexUpgrade ruby-libguestfsUpgrade lua-guestfsUpgrade nbdkit-basic-pluginsUpgrade seabiosUpgrade libiscsiUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-rescueUpgrade nbdkit-linuxdisk-pluginUpgrade netcf-develUpgrade qemu-imgUpgrade libguestfs-toolsUpgrade qemu-kvm-block-iscsiUpgrade qemu-block-rbdUpgrade libguestfs-xfsUpgrade supermin-develUpgrade libvirt-daemon-config-nwfilterUpgrade seabios-binUpgrade libguestfs-rsyncUpgrade libguestfs-gfs2Upgrade nbdfuseUpgrade libvirt-libsUpgrade virt-v2vUpgrade superminUpgrade qemu-system-aarch64-coreUpgrade python3-libvirtUpgrade nbdkit-ssh-pluginUpgrade nbdkit-bash-completionUpgrade libvirt-dbusUpgrade libguestfs-benchmarkingUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade ivshmem-toolsUpgrade hivex-develUpgrade libvirt-develUpgrade nbdkit-example-pluginsUpgrade libvirt-adminUpgrade qemu-system-x86-coreUpgrade libguestfs-man-pages-ukUpgrade virt-dibUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storageUpgrade qemu-commonUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade libguestfs-bash-completionUpgrade libnbdUpgrade libguestfs-java-develUpgrade netcfUpgrade libnbd-develUpgrade qemu-kvm-commonUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-bash-completionUpgrade libiscsi-develUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-config-networkUpgrade netcf-libsUpgrade libvirt-daemonUpgrade qemu-kvmUpgrade nbdkitUpgrade qemu-block-iscsiUpgrade sgabios-binUpgrade python3-hivex | Feb 5, 2022 | Nov 10, 2021 |
| Ubuntu | — | Upgrade qemu | Nov 19, 2024 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub