In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-debuginfoUpgrade qemu-user-staticUpgrade qemu-user-binfmtUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-imgUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-ui-cursesUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-block-sshUpgrade qemu-commonUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-userUpgrade ivshmem-toolsUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-guest-agent | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade seavgabios-binUpgrade qemu-kvm-common-maUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade perl-Sys-GuestfsUpgrade libguestfs-debuginfoUpgrade qemu-kvm-coreUpgrade libguestfs-inspect-iconsUpgrade hivex-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkitUpgrade libssh2Upgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-dbus-debugsourceUpgrade netcf-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-libs-debuginfoUpgrade ruby-libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libguestfs-java-develUpgrade nbdkit-plugin-python-commonUpgrade virt-dib-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-glusterUpgrade libssh2-debugsourceUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-plugin-python3-debuginfoUpgrade ruby-hivexUpgrade libguestfs-man-pages-jaUpgrade lua-guestfs-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libvirtUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-imgUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-debuginfoUpgrade libvirt-bash-completionUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libguestfs-tools-cUpgrade nbdkit-example-plugins-debuginfoUpgrade virt-dibUpgrade perl-hivexUpgrade libiscsiUpgrade qemu-kvm-debugsourceUpgrade qemu-kvmUpgrade nbdkit-develUpgrade libguestfs-javaUpgrade libvirtUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade nbdkit-bash-completionUpgrade qemu-kvm-maUpgrade hivexUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-network-debuginfoUpgrade nbdkit-plugin-gzipUpgrade netcf-develUpgrade ruby-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-develUpgrade netcf-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-nss-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-sshUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docsUpgrade perl-Sys-Virt-debuginfoUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade libvirt-daemonUpgrade hivex-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbd-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-rescueUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-xzUpgrade libvirt-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libiscsi-develUpgrade libvirt-dbus-debuginfoUpgrade libvirt-admin-debuginfoUpgrade seabios-binUpgrade netcf-libsUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-vddkUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade perl-hivex-debuginfoUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-xz-debuginfoUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libguestfs-xfsUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade nbdkit-debuginfoUpgrade qemu-kvm-block-curlUpgrade libssh2-debuginfoUpgrade sgabios-binUpgrade supermin-debuginfoUpgrade seabiosUpgrade nbdkit-plugin-python3Upgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-hivexUpgrade virt-v2vUpgrade libvirt-lock-sanlock-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade libvirt-dbusUpgrade libvirt-clientUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade netcfUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade libguestfs-java-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-img-maUpgrade libiscsi-utilsUpgrade qemu-img-debuginfoUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-tools-maUpgrade libvirt-daemon-driver-secretUpgrade superminUpgrade perl-Sys-Guestfs-debuginfoUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade libvirt-adminUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-Virt-debugsourceUpgrade sgabiosUpgrade virt-p2v-makerUpgrade netcf-debugsourceUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfo | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-imgUpgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-ui-sdlUpgrade qemu-block-dmgUpgrade qemu-system-aarch64Upgrade qemu-ui-cursesUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-block-rbd | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade python3-libguestfsUpgrade libvirt-lock-sanlockUpgrade qemu-kvmUpgrade perl-Sys-VirtUpgrade libguestfs-benchmarkingUpgrade ivshmem-toolsUpgrade libguestfs-bash-completionUpgrade libguestfs-rsyncUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemuUpgrade libguestfs-rescueUpgrade qemu-block-iscsiUpgrade nbdkit-bash-completionUpgrade libguestfs-man-pages-ukUpgrade libvirt-develUpgrade libguestfs-xfsUpgrade seabios-binUpgrade netcf-libsUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-develUpgrade libvirt-daemonUpgrade nbdkit-example-pluginsUpgrade qemu-block-rbdUpgrade libvirt-bash-completionUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python3Upgrade netcfUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nodedevUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-develUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-utilsUpgrade libvirt-adminUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-plugin-gzipUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-inspect-iconsUpgrade lua-guestfsUpgrade libvirtUpgrade perl-hivexUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade python3-libvirtUpgrade hivexUpgrade libguestfs-gfs2Upgrade perl-Sys-GuestfsUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade qemu-system-aarch64-coreUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-plugin-vddkUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade virt-v2vUpgrade sgabiosUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-nwfilterUpgrade seabiosUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsi-develUpgrade superminUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javadocUpgrade ruby-hivexUpgrade seavgabios-binUpgrade ruby-libguestfsUpgrade hivex-develUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsiUpgrade libvirt-nssUpgrade qemu-kvm-block-sshUpgrade virt-dibUpgrade libguestfs-javaUpgrade virt-p2v-makerUpgrade libguestfsUpgrade qemu-kvm-coreUpgrade libssh2Upgrade libvirt-libsUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-basic-pluginsUpgrade supermin-devel | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade libguestfs-man-pages-ukUpgrade libguestfs-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade nbdkit-example-pluginsUpgrade libguestfsUpgrade libguestfs-rsyncUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libiscsiUpgrade python3-hivexUpgrade python3-libvirt-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-debugsourceUpgrade libguestfs-tools-cUpgrade hivex-develUpgrade libguestfs-inspect-iconsUpgrade qemu-img-maUpgrade perl-hivex-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libvirtUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-develUpgrade lua-guestfs-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libguestfs-benchmarkingUpgrade libguestfs-man-pages-jaUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade netcfUpgrade libvirt-adminUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-gzipUpgrade nbdkit-plugin-python3Upgrade supermin-debuginfoUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-clientUpgrade libguestfs-winsupportUpgrade libssh2-debugsourceUpgrade qemu-kvmUpgrade libvirt-daemonUpgrade libvirt-lock-sanlockUpgrade python3-hivex-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-client-debuginfoUpgrade qemu-kvm-maUpgrade libguestfs-rescueUpgrade qemu-kvm-block-rbdUpgrade SLOFUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libssh2-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade qemu-kvm-block-glusterUpgrade nbdkit-bash-completionUpgrade libvirt-bash-completionUpgrade netcf-libs-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade libvirt-dbus-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libguestfs-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libguestfs-xfsUpgrade sgabios-binUpgrade libvirt-nssUpgrade hivex-debugsourceUpgrade libiscsi-debugsourceUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade perl-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libguestfs-toolsUpgrade libguestfs-javadocUpgrade superminUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade virt-dibUpgrade lua-guestfsUpgrade libvirt-daemon-debuginfoUpgrade netcf-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-debugsourceUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-libsUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-java-debuginfoUpgrade supermin-develUpgrade libguestfs-javaUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-admin-debuginfoUpgrade ruby-libguestfsUpgrade libiscsi-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-debuginfoUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-secretUpgrade virt-p2v-makerUpgrade libvirt-daemon-driver-storageUpgrade hivexUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade supermin-debugsourceUpgrade nbdkit-debugsourceUpgrade netcf-debugsourceUpgrade netcf-develUpgrade nbdkit-plugin-xz-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcf-libsUpgrade nbdkit-basic-pluginsUpgrade ruby-hivexUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-kvmUpgrade libssh2Upgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-VirtUpgrade libiscsi-develUpgrade qemu-imgUpgrade seavgabios-binUpgrade seabiosUpgrade hivex-debuginfoUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-tools-maUpgrade nbdkit-plugin-vddkUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-plugin-xzUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade seabios-binUpgrade sgabiosUpgrade nbdkitUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-config-network | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-kvmUpgrade xen-libsUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-ui-cursesUpgrade xen-doc-htmlUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade xenUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-block-dmgUpgrade xen-libs-32bitUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-toolsUpgrade xen-develUpgrade kvmUpgrade qemu-langUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-skibootUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirect | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-system-x86 | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub