In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-commonUpgrade qemu-userUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-audio-sdlUpgrade qemu-user-binfmtUpgrade qemuUpgrade qemu-user-staticUpgrade qemu-debuginfoUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-ui-sdlUpgrade qemu-audio-ossUpgrade qemu-block-dmg | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade nbdkit-plugin-gzipUpgrade libguestfs-benchmarkingUpgrade libguestfs-develUpgrade libvirt-lock-sanlockUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade hivexUpgrade libvirt-client-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-core-debuginfoUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-diskUpgrade libiscsiUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsi-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libssh2Upgrade libvirt-debugsourceUpgrade virt-v2v-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-libs-debuginfoUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-debugsourceUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-inspect-iconsUpgrade lua-guestfsUpgrade libguestfs-gobjectUpgrade libguestfs-tools-cUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libguestfs-javaUpgrade qemu-kvm-maUpgrade lua-guestfs-debuginfoUpgrade perl-hivexUpgrade qemu-kvmUpgrade libguestfs-winsupportUpgrade libguestfs-rsyncUpgrade libvirt-debuginfoUpgrade ruby-hivex-debuginfoUpgrade nbdkit-bash-completionUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade ruby-hivexUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-sshUpgrade libvirtUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libs-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-coreUpgrade nbdkit-develUpgrade python3-libvirtUpgrade nbdkitUpgrade ruby-libguestfsUpgrade libvirt-nss-debuginfoUpgrade qemu-kvm-common-maUpgrade libvirt-dbus-debugsourceUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade hivex-debugsourceUpgrade netcf-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade virt-dib-debuginfoUpgrade libguestfsUpgrade libssh2-debugsourceUpgrade nbdkit-basic-pluginsUpgrade nbdkit-plugin-python-commonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-admin-debuginfoUpgrade qemu-kvm-block-curlUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-kvmUpgrade libguestfs-javadocUpgrade nbdkit-plugin-xzUpgrade libvirt-nssUpgrade libguestfs-rescueUpgrade hivex-develUpgrade qemu-kvm-block-iscsiUpgrade libvirt-develUpgrade python3-libvirt-debuginfoUpgrade libiscsi-debuginfoUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade supermin-debugsourceUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade perl-Sys-Virt-debugsourceUpgrade python3-hivexUpgrade libvirt-dbusUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade sgabios-binUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-rbd-debuginfoUpgrade python3-hivex-debuginfoUpgrade libiscsi-utilsUpgrade netcf-debugsourceUpgrade supermin-develUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-ma-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemonUpgrade supermin-debuginfoUpgrade libvirt-adminUpgrade hivex-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-libguestfsUpgrade sgabiosUpgrade nbdkit-plugin-vddkUpgrade netcfUpgrade libguestfs-bash-completionUpgrade seabiosUpgrade libssh2-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdkit-plugin-python3Upgrade libguestfs-debugsourceUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-gfs2Upgrade qemu-kvm-commonUpgrade netcf-libsUpgrade qemu-img-maUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-java-debuginfoUpgrade nbdkit-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade perl-Sys-Guestfs-debuginfoUpgrade virt-p2v-makerUpgrade qemu-img-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-utils-debuginfoUpgrade qemu-kvm-tools-maUpgrade superminUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade perl-hivex-debuginfoUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-ukUpgrade libguestfs-xfsUpgrade qemu-kvm-block-gluster-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-gluster-debuginfo | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-kvmUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-system-aarch64 | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade seabios-binUpgrade libguestfs-rsyncUpgrade nbdkit-develUpgrade qemu-block-rbdUpgrade libvirt-daemon-kvmUpgrade libguestfs-rescueUpgrade python3-hivexUpgrade libvirt-daemonUpgrade libvirt-adminUpgrade libguestfs-develUpgrade netcfUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade libvirt-bash-completionUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-plugin-python3Upgrade qemu-kvm-block-iscsiUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-tools-cUpgrade nbdkitUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-glusterUpgrade python3-libguestfsUpgrade qemu-block-iscsiUpgrade perl-Sys-VirtUpgrade qemu-kvmUpgrade libvirt-lock-sanlockUpgrade ivshmem-toolsUpgrade libguestfs-benchmarkingUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade libguestfs-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-gzipUpgrade libguestfs-gobject-develUpgrade libvirt-develUpgrade libguestfs-xfsUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-curlUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade qemuUpgrade libguestfs-javaUpgrade qemu-kvm-coreUpgrade libiscsi-develUpgrade libiscsiUpgrade qemu-kvm-block-glusterUpgrade superminUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade netcf-develUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gobjectUpgrade libvirt-libsUpgrade supermin-develUpgrade libguestfsUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-dibUpgrade libvirt-clientUpgrade hivex-develUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade virt-p2v-makerUpgrade sgabiosUpgrade lua-guestfsUpgrade perl-hivexUpgrade ruby-libguestfsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-system-aarch64Upgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2vUpgrade qemu-kvm-block-sshUpgrade ruby-hivexUpgrade libguestfs-java-develUpgrade seabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade perl-Sys-GuestfsUpgrade python3-libvirtUpgrade sgabios-binUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libssh2Upgrade qemu-system-aarch64-coreUpgrade libguestfs-gfs2Upgrade hivexUpgrade nbdkit-plugin-xzUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-vddk | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-nss-debuginfoUpgrade lua-guestfsUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade qemu-kvm-tools-maUpgrade nbdkit-plugin-python3-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade sgabiosUpgrade perl-hivexUpgrade libguestfs-debugsourceUpgrade libvirt-libsUpgrade seabios-binUpgrade libguestfs-javadocUpgrade seabiosUpgrade hivex-debuginfoUpgrade nbdkit-plugin-xz-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade libssh2Upgrade virt-p2v-makerUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-toolsUpgrade qemu-imgUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-gzip-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-xfsUpgrade qemu-kvm-coreUpgrade libvirt-dbusUpgrade libvirt-daemon-kvmUpgrade seavgabios-binUpgrade sgabios-binUpgrade ruby-hivex-debuginfoUpgrade libguestfs-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-tools-c-debuginfoUpgrade netcf-libsUpgrade virt-v2vUpgrade qemu-kvm-debugsourceUpgrade nbdkit-plugin-xzUpgrade libvirt-docsUpgrade hivex-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-admin-debuginfoUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-nssUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-driver-nwfilterUpgrade netcf-debugsourceUpgrade nbdkit-basic-pluginsUpgrade ruby-libguestfsUpgrade libiscsi-develUpgrade libvirt-daemon-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade superminUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade libiscsi-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-dbus-debugsourceUpgrade hivexUpgrade virt-dibUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-hivexUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade virt-v2v-debuginfoUpgrade libguestfs-javaUpgrade nbdkitUpgrade qemu-kvm-common-maUpgrade netcf-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-client-debuginfoUpgrade netcf-libs-debuginfoUpgrade libguestfs-winsupportUpgrade nbdkit-plugin-python-commonUpgrade ruby-libguestfs-debuginfoUpgrade libguestfs-inspect-iconsUpgrade hivex-develUpgrade qemu-guest-agent-debuginfoUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvmUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-glusterUpgrade lua-guestfs-debuginfoUpgrade libguestfs-tools-cUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-maUpgrade nbdkit-plugin-python3Upgrade python3-hivex-debuginfoUpgrade nbdkit-bash-completionUpgrade nbdkit-develUpgrade qemu-kvm-ma-debuginfoUpgrade libguestfs-debuginfoUpgrade libguestfsUpgrade perl-Sys-Virt-debugsourceUpgrade python3-libvirtUpgrade nbdkit-plugin-gzipUpgrade SLOFUpgrade nbdkit-debuginfoUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-iscsiUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-develUpgrade libvirt-bash-completionUpgrade libguestfs-gobject-develUpgrade nbdkit-basic-plugins-debuginfoUpgrade netcfUpgrade libguestfs-man-pages-ukUpgrade libvirt-dbus-debuginfoUpgrade perl-Sys-GuestfsUpgrade libssh2-debuginfoUpgrade libvirt-clientUpgrade qemu-kvm-common-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-adminUpgrade qemu-kvm-block-curlUpgrade perl-Sys-Guestfs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-libs-debuginfoUpgrade qemu-img-debuginfoUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-debugsourceUpgrade qemu-img-maUpgrade python3-hivexUpgrade libiscsiUpgrade libssh2-debugsourceUpgrade supermin-debuginfoUpgrade python3-libvirt-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libiscsi-utils-debuginfoUpgrade perl-hivex-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-bash-completionUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-glusterUpgrade python3-libguestfs | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemuUpgrade qemu-block-glusterUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade xenUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade xen-libsUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade xen-libs-32bitUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-s390 | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub