Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-img | Sep 27, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-guest-agent | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-guest-agent | Sep 25, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ksmUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-testsuiteUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-linux-userUpgrade qemu-seabiosUpgrade xenUpgrade qemu-kvmUpgrade qemu-toolsUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade xen-develUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-block-dmgUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade xen-doc-htmlUpgrade qemu-block-sshUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemu-extraUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-ui-opengl | Nov 27, 2018 | Oct 16, 2018 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 30, 2018 | Oct 16, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub