In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-userUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-commonUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-user-binfmtUpgrade qemu-audio-ossUpgrade qemu-ui-sdlUpgrade qemuUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-user-staticUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-debuginfoUpgrade qemu-block-dmg | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade superminUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-tools-maUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-develUpgrade hivex-develUpgrade libguestfs-rescueUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libiscsi-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-javadocUpgrade netcf-debugsourceUpgrade libiscsi-utils-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade qemu-img-debuginfoUpgrade virt-p2v-makerUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-img-maUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-nwfilterUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-debuginfoUpgrade netcfUpgrade libiscsi-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade seabios-binUpgrade python3-libguestfsUpgrade libvirt-adminUpgrade libguestfs-bash-completionUpgrade supermin-debugsourceUpgrade libguestfs-debugsourceUpgrade netcf-libsUpgrade qemu-kvm-block-curl-debuginfoUpgrade nbdkit-plugin-vddkUpgrade sgabios-binUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-python3Upgrade libvirt-daemonUpgrade libssh2-debuginfoUpgrade sgabiosUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-ma-debuginfoUpgrade supermin-develUpgrade libvirt-clientUpgrade python3-hivex-debuginfoUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade virt-v2vUpgrade hivex-debuginfoUpgrade seabiosUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-docsUpgrade libguestfs-toolsUpgrade perl-Sys-VirtUpgrade python3-hivexUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-kvmUpgrade qemu-kvm-block-curlUpgrade nbdkit-plugin-gzip-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-xfsUpgrade qemu-guest-agentUpgrade perl-hivex-debuginfoUpgrade libiscsi-utilsUpgrade libvirt-nssUpgrade nbdkit-plugin-xzUpgrade libguestfs-javaUpgrade libguestfs-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-debugsourceUpgrade perl-hivexUpgrade qemu-guest-agent-debuginfoUpgrade python3-libvirtUpgrade qemu-imgUpgrade virt-dib-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade ruby-hivexUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade hivexUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-maUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libssh2Upgrade ruby-hivex-debuginfoUpgrade libguestfs-benchmarkingUpgrade nbdkitUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-logicalUpgrade libssh2-debugsourceUpgrade libguestfs-inspect-iconsUpgrade nbdkit-debugsourceUpgrade lua-guestfs-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-gzipUpgrade libguestfs-rsyncUpgrade libvirt-libs-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade virt-v2v-debuginfoUpgrade libiscsi-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-common-maUpgrade libguestfs-gobjectUpgrade seavgabios-binUpgrade qemu-kvm-coreUpgrade libiscsiUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-client-debuginfoUpgrade netcf-debuginfoUpgrade lua-guestfsUpgrade qemu-kvm-block-sshUpgrade libguestfs-benchmarking-debuginfoUpgrade ruby-libguestfsUpgrade nbdkit-bash-completionUpgrade netcf-develUpgrade libguestfs-winsupportUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirtUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade netcf-libs-debuginfoUpgrade libguestfs-java-develUpgrade qemu-kvmUpgrade libvirt-debugsourceUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-python-commonUpgrade virt-dibUpgrade hivex-debugsourceUpgrade libvirt-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-commonUpgrade qemu-audio-ossUpgrade qemu-system-aarch64-coreUpgrade qemu-block-glusterUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-ui-sdlUpgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-system-aarch64Upgrade qemu-block-dmgUpgrade qemu-ui-cursesUpgrade qemu-img | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade libvirt-nssUpgrade supermin-develUpgrade netcf-develUpgrade hivex-develUpgrade libvirt-clientUpgrade libvirt-dbusUpgrade lua-guestfsUpgrade libiscsiUpgrade libiscsi-develUpgrade libvirt-daemon-driver-qemuUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2vUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade sgabios-binUpgrade python3-libvirtUpgrade libguestfs-gfs2Upgrade libguestfs-toolsUpgrade hivexUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-javaUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-java-develUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-p2v-makerUpgrade libguestfs-javadocUpgrade seavgabios-binUpgrade qemu-kvm-block-rbdUpgrade ruby-libguestfsUpgrade libguestfsUpgrade libssh2Upgrade libvirt-daemon-driver-interfaceUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade seabiosUpgrade qemu-kvm-block-glusterUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-docsUpgrade qemu-imgUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-sshUpgrade perl-hivexUpgrade qemu-kvm-commonUpgrade superminUpgrade libvirt-daemon-driver-networkUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade python3-libguestfsUpgrade seabios-binUpgrade qemu-kvm-block-curlUpgrade netcf-libsUpgrade libguestfs-man-pages-ukUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-config-networkUpgrade nbdkit-plugin-gzipUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobject-develUpgrade libvirt-daemonUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-bash-completionUpgrade qemu-kvmUpgrade libvirt-daemon-kvmUpgrade qemu-commonUpgrade netcfUpgrade python3-hivexUpgrade qemu-block-iscsiUpgrade libvirt-bash-completionUpgrade perl-Sys-VirtUpgrade ivshmem-toolsUpgrade qemu-guest-agentUpgrade libvirt-lock-sanlockUpgrade libvirt-adminUpgrade qemuUpgrade nbdkitUpgrade nbdkit-plugin-python3Upgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-tools-cUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-winsupportUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade libguestfs-rsyncUpgrade nbdkit-devel | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-nssUpgrade libiscsi-debugsourceUpgrade qemu-kvm-coreUpgrade libvirt-nss-debuginfoUpgrade libguestfs-gfs2Upgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-daemon-config-nwfilterUpgrade ruby-hivexUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-libsUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-scsiUpgrade sgabiosUpgrade supermin-develUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade seabios-binUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade sgabios-binUpgrade libvirt-daemon-driver-network-debuginfoUpgrade superminUpgrade lua-guestfsUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libguestfs-javadocUpgrade nbdkit-plugin-vddkUpgrade qemu-imgUpgrade seabiosUpgrade libguestfs-toolsUpgrade libssh2Upgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade hivex-debuginfoUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-v2vUpgrade virt-p2v-makerUpgrade perl-hivexUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-dbusUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-java-develUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-config-networkUpgrade hivex-debugsourceUpgrade nbdkitUpgrade libguestfs-tools-c-debuginfoUpgrade libguestfs-javaUpgrade libiscsi-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-admin-debuginfoUpgrade supermin-debugsourceUpgrade ruby-hivex-debuginfoUpgrade netcf-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-common-maUpgrade netcf-develUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-tools-maUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storageUpgrade hivexUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-guest-agentUpgrade nbdkit-example-pluginsUpgrade netcfUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-adminUpgrade libvirt-libs-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libiscsiUpgrade supermin-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirtUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-develUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade python3-hivex-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-rescueUpgrade nbdkit-bash-completionUpgrade netcf-libs-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libssh2-debugsourceUpgrade libvirt-daemonUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-lock-sanlockUpgrade libguestfs-inspect-iconsUpgrade libguestfs-bash-completionUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-maUpgrade nbdkit-plugin-python3Upgrade libguestfsUpgrade libguestfs-benchmarkingUpgrade libguestfs-man-pages-jaUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-libguestfsUpgrade libguestfs-winsupportUpgrade virt-dib-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade python3-libvirtUpgrade libvirt-clientUpgrade qemu-kvm-block-sshUpgrade qemu-guest-agent-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-man-pages-ukUpgrade libvirt-develUpgrade libssh2-debuginfoUpgrade libvirt-client-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade perl-Sys-GuestfsUpgrade libiscsi-utilsUpgrade qemu-kvm-block-rbdUpgrade hivex-develUpgrade libguestfs-tools-cUpgrade nbdkit-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-bash-completionUpgrade qemu-img-maUpgrade SLOFUpgrade libvirt-daemon-driver-nodedevUpgrade lua-guestfs-debuginfoUpgrade python3-hivexUpgrade libvirt-debugsource | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade xen-libsUpgrade qemu-ui-spice-appUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade xen-kmp-paeUpgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-extraUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade xen-toolsUpgrade qemu-s390Upgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade xenUpgrade qemu-seabiosUpgrade qemu-chardev-spiceUpgrade xen-doc-htmlUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade kvmUpgrade qemu-x86Upgrade xen-tools-domu | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-system-x86 | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub