In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-system-x86Upgrade qemu-block-dmgUpgrade qemu-ui-cursesUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-user-staticUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-user-binfmtUpgrade qemu-debuginfoUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-userUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-audio-alsa | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-toolsUpgrade nbdkit-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-libsUpgrade libvirt-dbusUpgrade libvirt-daemonUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libvirt-clientUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libiscsi-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade sgabios-binUpgrade libguestfs-bash-completionUpgrade python3-libguestfsUpgrade hivex-develUpgrade netcfUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-plugin-vddkUpgrade supermin-develUpgrade libvirt-lock-sanlock-debuginfoUpgrade nbdkit-example-pluginsUpgrade supermin-debugsourceUpgrade libguestfs-debugsourceUpgrade qemu-kvm-commonUpgrade netcf-libsUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libiscsi-develUpgrade hivex-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-hivexUpgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade libvirt-adminUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade netcf-debugsourceUpgrade seabios-binUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-img-maUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-ma-debuginfoUpgrade sgabiosUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-xfsUpgrade libguestfs-java-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-tools-maUpgrade virt-p2v-makerUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libssh2-debuginfoUpgrade nbdkit-plugin-python3Upgrade supermin-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade superminUpgrade libvirt-nssUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-kvmUpgrade seabiosUpgrade libiscsi-utilsUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libguestfs-javadocUpgrade python3-hivex-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-rescueUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-gluster-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-hivex-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-bash-completionUpgrade libvirt-client-debuginfoUpgrade ruby-hivexUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libiscsiUpgrade virt-dib-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-rsyncUpgrade qemu-kvm-common-maUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade libiscsi-debugsourceUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-rbdUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-plugin-vddk-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libvirt-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfs-benchmarkingUpgrade libguestfs-develUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-debuginfoUpgrade nbdkit-develUpgrade nbdkit-debugsourceUpgrade seavgabios-binUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-inspect-iconsUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-glusterUpgrade hivexUpgrade libguestfs-tools-cUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade netcf-libs-debuginfoUpgrade qemu-kvmUpgrade libvirt-debugsourceUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-gobject-develUpgrade hivex-debugsourceUpgrade libguestfs-java-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-javaUpgrade virt-v2v-debuginfoUpgrade nbdkitUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-sshUpgrade netcf-debuginfoUpgrade qemu-kvm-maUpgrade nbdkit-example-plugins-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade perl-hivexUpgrade ruby-libguestfsUpgrade libguestfsUpgrade libguestfs-winsupportUpgrade qemu-imgUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-gobjectUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-ssh-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libguestfs-man-pages-ja | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-commonUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade qemu-system-aarch64Upgrade qemu-block-dmgUpgrade qemu-imgUpgrade qemu-block-nfs | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-networkUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobject-develUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-gzipUpgrade qemuUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-python3Upgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libvirt-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade nbdkitUpgrade qemu-commonUpgrade libvirt-daemonUpgrade libguestfs-tools-cUpgrade libiscsi-utilsUpgrade seabios-binUpgrade qemu-kvm-block-iscsiUpgrade python3-hivexUpgrade netcfUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade python3-libguestfsUpgrade libvirt-daemon-kvmUpgrade qemu-block-iscsiUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python-commonUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-develUpgrade nbdkit-develUpgrade libguestfs-benchmarkingUpgrade ivshmem-toolsUpgrade libvirt-lock-sanlockUpgrade qemu-block-rbdUpgrade ruby-libguestfsUpgrade qemu-system-aarch64-coreUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-commonUpgrade libvirtUpgrade supermin-develUpgrade lua-guestfsUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobjectUpgrade perl-hivexUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-javaUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade sgabiosUpgrade qemu-kvm-block-glusterUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-vddkUpgrade libiscsiUpgrade virt-dibUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsi-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade sgabios-binUpgrade hivexUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade superminUpgrade libguestfs-java-develUpgrade qemu-kvm-block-sshUpgrade python3-libvirtUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gfs2Upgrade virt-v2vUpgrade libvirt-daemon-driver-qemuUpgrade libssh2Upgrade seavgabios-binUpgrade qemu-kvm-coreUpgrade virt-p2v-makerUpgrade libvirt-libsUpgrade libguestfsUpgrade qemu-system-aarch64Upgrade seabiosUpgrade ruby-hivexUpgrade libvirt-nssUpgrade netcf-develUpgrade libvirt-client | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-v2vUpgrade libguestfs-toolsUpgrade nbdkitUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-lock-sanlock-debuginfoUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-nwfilterUpgrade virt-dibUpgrade libvirt-daemon-config-networkUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-nssUpgrade seabiosUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-debugsourceUpgrade libvirt-libsUpgrade qemu-imgUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade seabios-binUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-v2v-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade hivex-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-common-maUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-dbusUpgrade perl-Sys-Virt-debuginfoUpgrade libssh2Upgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-coreUpgrade netcf-develUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-plugin-xzUpgrade seavgabios-binUpgrade ruby-hivexUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-debugsourceUpgrade virt-p2v-makerUpgrade nbdkit-plugin-xz-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade sgabios-binUpgrade libguestfs-gfs2Upgrade netcf-libsUpgrade lua-guestfsUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-docsUpgrade libguestfs-develUpgrade libguestfs-java-debuginfoUpgrade libvirt-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-commonUpgrade netcf-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-java-develUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-tools-maUpgrade netcf-debuginfoUpgrade libguestfs-javaUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-xfsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade sgabiosUpgrade libvirt-admin-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-kvmUpgrade hivexUpgrade superminUpgrade qemu-kvm-block-sshUpgrade libguestfs-inspect-iconsUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirtUpgrade qemu-kvmUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-man-pages-jaUpgrade hivex-develUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-glusterUpgrade python3-hivexUpgrade libiscsiUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-winsupportUpgrade perl-hivex-debuginfoUpgrade libvirt-lock-sanlockUpgrade nbdkit-plugin-python3Upgrade virt-dib-debuginfoUpgrade python3-libvirt-debuginfoUpgrade python3-hivex-debuginfoUpgrade supermin-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfsUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobjectUpgrade netcf-libs-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libvirt-adminUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcfUpgrade libvirt-develUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade lua-guestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-libs-debuginfoUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-utilsUpgrade libssh2-debugsourceUpgrade nbdkit-example-pluginsUpgrade perl-Sys-Guestfs-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade python3-libvirtUpgrade libssh2-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade SLOFUpgrade libguestfs-tools-cUpgrade libvirt-debugsourceUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-kvm-block-curlUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-img-maUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-guest-agentUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libguestfs-rescueUpgrade qemu-img-debuginfoUpgrade qemu-kvm-maUpgrade libguestfs-rsync | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade xen-libs-32bitUpgrade xenUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade xen-kmp-paeUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-langUpgrade qemu-guest-agentUpgrade xen-develUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade xen-tools-domUUpgrade qemu-skiboot | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub