In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-block-iscsiUpgrade qemu-userUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-debuginfoUpgrade qemu-user-staticUpgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-user-binfmtUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-ui-sdlUpgrade qemu-block-nfsUpgrade qemu-system-aarch64 | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade libguestfsUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-imgUpgrade perl-hivexUpgrade libguestfs-winsupportUpgrade python3-libvirtUpgrade netcf-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-maUpgrade nbdkit-develUpgrade libvirt-libs-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade ruby-libguestfsUpgrade libguestfs-gobject-develUpgrade netcf-libs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade hivexUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkitUpgrade libvirt-dbus-debugsourceUpgrade libssh2Upgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade nbdkit-debugsourceUpgrade qemu-kvm-common-maUpgrade libguestfs-benchmarkingUpgrade libguestfs-javaUpgrade netcf-develUpgrade nbdkit-plugin-python3-debuginfoUpgrade libguestfs-develUpgrade libguestfs-gobjectUpgrade virt-dib-debuginfoUpgrade seavgabios-binUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-coreUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-ssh-debuginfoUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-block-rbdUpgrade libguestfs-debuginfoUpgrade libssh2-debugsourceUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade ruby-hivex-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-pluginsUpgrade nbdkit-bash-completionUpgrade libiscsi-debugsourceUpgrade ruby-hivexUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirtUpgrade libvirt-bash-completionUpgrade lua-guestfsUpgrade virt-dibUpgrade virt-v2v-debuginfoUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-xfsUpgrade netcfUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-admin-debuginfoUpgrade hivex-develUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libguestfsUpgrade libguestfs-bash-completionUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade seabios-binUpgrade libguestfs-gfs2Upgrade libiscsi-develUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade superminUpgrade qemu-kvm-commonUpgrade perl-Sys-VirtUpgrade nbdkit-example-pluginsUpgrade libvirt-adminUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-img-maUpgrade nbdkit-plugin-vddkUpgrade supermin-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-debuginfoUpgrade libvirt-clientUpgrade netcf-libsUpgrade qemu-guest-agentUpgrade sgabiosUpgrade libguestfs-javadocUpgrade libguestfs-debugsourceUpgrade python3-hivexUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemonUpgrade libvirt-docsUpgrade libguestfs-man-pages-ukUpgrade supermin-debugsourceUpgrade qemu-kvm-ma-debuginfoUpgrade virt-v2vUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libiscsi-utilsUpgrade hivex-debuginfoUpgrade libvirt-nssUpgrade python3-libvirt-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-develUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade perl-hivex-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade virt-p2v-makerUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-tools-maUpgrade libiscsi-utils-debuginfoUpgrade libvirt-libsUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-Virt-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbd-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade seabiosUpgrade sgabios-binUpgrade libvirt-dbusUpgrade nbdkit-plugin-gzip-debuginfo | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-imgUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-block-dmgUpgrade qemu-ui-sdlUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-curl | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade libguestfs-java-develUpgrade qemu-kvm-block-sshUpgrade virt-p2v-makerUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade virt-v2vUpgrade ruby-hivexUpgrade libssh2Upgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-coreUpgrade libguestfsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-toolsUpgrade libvirt-libsUpgrade nbdkit-plugin-xzUpgrade qemu-system-aarch64Upgrade seabiosUpgrade libguestfs-inspect-iconsUpgrade libvirt-docsUpgrade sgabios-binUpgrade libguestfs-gfs2Upgrade netcf-develUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-GuestfsUpgrade supermin-develUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storageUpgrade qemu-system-aarch64-coreUpgrade virt-dibUpgrade libvirt-clientUpgrade libvirt-dbusUpgrade superminUpgrade qemu-kvm-commonUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-basic-pluginsUpgrade qemu-imgUpgrade libvirt-daemon-driver-networkUpgrade libiscsi-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade perl-hivexUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-rbdUpgrade libguestfs-javadocUpgrade libguestfs-gobjectUpgrade ruby-libguestfsUpgrade libvirtUpgrade lua-guestfsUpgrade sgabiosUpgrade hivex-develUpgrade libguestfs-bash-completionUpgrade libiscsi-utilsUpgrade qemu-block-rbdUpgrade nbdkit-bash-completionUpgrade libguestfs-winsupportUpgrade nbdkitUpgrade libvirt-daemonUpgrade netcf-libsUpgrade qemuUpgrade qemu-commonUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade nbdkit-develUpgrade python3-libguestfsUpgrade perl-Sys-VirtUpgrade ivshmem-toolsUpgrade libguestfs-benchmarkingUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-gzipUpgrade nbdkit-example-pluginsUpgrade libguestfs-man-pages-jaUpgrade libvirt-develUpgrade libguestfs-gobject-develUpgrade libguestfs-develUpgrade qemu-block-glusterUpgrade libvirt-adminUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-python-commonUpgrade python3-hivexUpgrade netcfUpgrade qemu-block-iscsiUpgrade nbdkit-plugin-python3Upgrade libvirt-bash-completionUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade libvirt-lock-sanlockUpgrade libguestfs-xfsUpgrade seabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-rescue | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-debugsourceUpgrade libguestfs-gobject-develUpgrade libvirt-daemonUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-img-debuginfoUpgrade libguestfs-gobjectUpgrade libguestfs-winsupportUpgrade qemu-img-maUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-curl-debuginfoUpgrade virt-dib-debuginfoUpgrade SLOFUpgrade libvirt-libs-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-develUpgrade qemu-kvm-block-ssh-debuginfoUpgrade python3-libvirt-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-rbdUpgrade libiscsi-utilsUpgrade libssh2-debugsourceUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-rescueUpgrade ruby-libguestfs-debuginfoUpgrade python3-libvirtUpgrade python3-hivexUpgrade libguestfs-man-pages-ukUpgrade libvirt-bash-completionUpgrade libguestfs-rsyncUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-tools-cUpgrade libguestfs-gobject-debuginfoUpgrade perl-hivex-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libiscsiUpgrade hivex-develUpgrade nbdkit-plugin-gzipUpgrade libvirt-client-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-maUpgrade qemu-kvm-ma-debuginfoUpgrade nbdkit-bash-completionUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libguestfs-inspect-iconsUpgrade qemu-guest-agentUpgrade netcfUpgrade libvirt-adminUpgrade libssh2-debuginfoUpgrade nbdkit-develUpgrade libguestfs-bash-completionUpgrade python3-hivex-debuginfoUpgrade libguestfs-benchmarkingUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirtUpgrade libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade hivexUpgrade perl-Sys-VirtUpgrade perl-Sys-Virt-debuginfoUpgrade libiscsi-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libssh2Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-kvmUpgrade netcf-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-admin-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkitUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libiscsi-debugsourceUpgrade supermin-develUpgrade ruby-hivexUpgrade seabiosUpgrade qemu-imgUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-common-maUpgrade libguestfs-tools-c-debuginfoUpgrade sgabios-binUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libiscsi-develUpgrade hivex-debugsourceUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade libguestfs-javadocUpgrade ruby-libguestfsUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-tools-maUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade virt-dibUpgrade nbdkit-debugsourceUpgrade netcf-develUpgrade libvirt-docsUpgrade lua-guestfsUpgrade supermin-debugsourceUpgrade ruby-hivex-debuginfoUpgrade libguestfs-xfsUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade superminUpgrade seabios-binUpgrade libguestfs-gfs2Upgrade netcf-debugsourceUpgrade virt-v2vUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storageUpgrade netcf-libsUpgrade sgabiosUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-secretUpgrade perl-hivex | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-ksmUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade xen-kmp-paeUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade xenUpgrade qemu-armUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade kvmUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-block-glusterUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-ppcUpgrade qemu-ui-opengl | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub