In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-paUpgrade qemu-block-curlUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-userUpgrade qemu-ui-gtkUpgrade qemu-commonUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-system-x86-coreUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-block-dmgUpgrade qemu-debuginfoUpgrade qemu-system-x86Upgrade qemu-ui-cursesUpgrade qemu-user-binfmtUpgrade qemu-block-nfsUpgrade qemu-user-staticUpgrade qemu-imgUpgrade qemu-kvm-core | Apr 27, 2020 | May 31, 2019 |
| Centos_linux | — | Upgrade qemu-kvm-common-debuginfoUpgrade supermin-debugsourceUpgrade qemu-kvm-ma-debuginfoUpgrade python3-hivexUpgrade supermin-develUpgrade libvirt-daemonUpgrade perl-Sys-VirtUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-Guestfs-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade seabios-binUpgrade nbdkit-plugin-python3Upgrade libvirt-docsUpgrade libguestfs-gfs2Upgrade qemu-img-maUpgrade libvirt-admin-debuginfoUpgrade libiscsi-develUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-man-pages-ukUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-clientUpgrade libvirt-dbusUpgrade ruby-libguestfs-debuginfoUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-curlUpgrade python3-hivex-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade netcf-debugsourceUpgrade libvirt-daemon-debuginfoUpgrade sgabios-binUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libvirt-nssUpgrade qemu-kvm-block-rbd-debuginfoUpgrade perl-Sys-Virt-debuginfoUpgrade superminUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade nbdkit-plugin-xzUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade netcfUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-example-pluginsUpgrade libguestfs-java-debuginfoUpgrade netcf-libsUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-lock-sanlock-debuginfoUpgrade libvirt-adminUpgrade virt-p2v-makerUpgrade qemu-kvm-commonUpgrade nbdkit-debuginfoUpgrade qemu-img-debuginfoUpgrade virt-v2vUpgrade libiscsi-utilsUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-javadocUpgrade seabiosUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-debuginfoUpgrade supermin-debuginfoUpgrade nbdkit-plugin-vddkUpgrade libguestfs-toolsUpgrade qemu-kvm-block-curl-debuginfoUpgrade python3-libguestfsUpgrade libvirt-develUpgrade qemu-guest-agentUpgrade hivex-debuginfoUpgrade python3-libvirt-debuginfoUpgrade sgabiosUpgrade qemu-kvm-tools-maUpgrade libguestfs-debuginfoUpgrade libvirt-bash-completionUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-client-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-common-maUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade seavgabios-binUpgrade libguestfs-gobjectUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade virt-dib-debuginfoUpgrade libguestfs-rsyncUpgrade libiscsi-debugsourceUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-libs-debuginfoUpgrade perl-hivexUpgrade netcf-debuginfoUpgrade ruby-hivex-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-rbdUpgrade nbdkit-example-plugins-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libguestfs-winsupportUpgrade nbdkit-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libiscsiUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libguestfsUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-core-debuginfoUpgrade nbdkit-plugin-vddk-debuginfoUpgrade nbdkit-bash-completionUpgrade ruby-libguestfsUpgrade libvirt-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-storageUpgrade python3-libvirtUpgrade qemu-imgUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade virt-v2v-debuginfoUpgrade qemu-kvm-maUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-debugsourceUpgrade qemu-kvmUpgrade virt-dibUpgrade hivex-debugsourceUpgrade netcf-libs-debuginfoUpgrade libssh2Upgrade libvirt-dbus-debugsourceUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-guest-agent-debuginfoUpgrade nbdkitUpgrade libguestfs-javaUpgrade nbdkit-plugin-python3-debuginfoUpgrade hivexUpgrade nbdkit-plugin-python-commonUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-java-develUpgrade netcf-develUpgrade libguestfs-benchmarkingUpgrade nbdkit-plugin-gzipUpgrade libguestfs-develUpgrade libvirt-lock-sanlockUpgrade lua-guestfs-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libguestfs-man-pages-jaUpgrade libssh2-debugsourceUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logical | Aug 28, 2019 | May 31, 2019 |
| Debian | — | Upgrade qemu | May 10, 2019 | May 10, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 25, 2019 | Apr 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-block-dmgUpgrade qemu-system-aarch64Upgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-block-glusterUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade qemu-block-curl | Jan 3, 2020 | May 31, 2019 |
| Oracle_linux | — | Upgrade nbdkit-plugin-python3Upgrade libguestfs-man-pages-jaUpgrade nbdkit-example-pluginsUpgrade nbdkit-plugin-gzipUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-xfsUpgrade qemu-block-glusterUpgrade libguestfs-develUpgrade libguestfs-tools-cUpgrade nbdkit-develUpgrade seabios-binUpgrade netcf-libsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-rsyncUpgrade qemu-block-rbdUpgrade qemu-kvm-block-iscsiUpgrade qemu-commonUpgrade libvirt-develUpgrade qemuUpgrade libvirt-daemonUpgrade libvirt-adminUpgrade nbdkitUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade qemu-guest-agentUpgrade libguestfs-benchmarkingUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade python3-libguestfsUpgrade libvirt-lock-sanlockUpgrade perl-Sys-VirtUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-kvmUpgrade qemu-block-iscsiUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-curlUpgrade netcfUpgrade python3-hivexUpgrade nbdkit-plugin-python-commonUpgrade libiscsi-utilsUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-sshUpgrade perl-hivexUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-imgUpgrade sgabiosUpgrade qemu-kvm-block-rbdUpgrade nbdkit-plugin-xzUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-glusterUpgrade ruby-hivexUpgrade libguestfs-java-develUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2vUpgrade seabiosUpgrade python3-libvirtUpgrade seavgabios-binUpgrade libguestfs-inspect-iconsUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storageUpgrade libguestfsUpgrade qemu-system-aarch64Upgrade superminUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-dibUpgrade libvirt-clientUpgrade libiscsi-develUpgrade libssh2Upgrade libvirt-docsUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade libvirt-libsUpgrade libvirtUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade hivex-develUpgrade libiscsiUpgrade ruby-libguestfsUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libguestfs-gobjectUpgrade virt-p2v-makerUpgrade hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-toolsUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-java | May 15, 2019 | Dec 14, 2018 |
| Redhat_linux | — | Upgrade virt-p2v-makerUpgrade perl-Sys-VirtUpgrade nbdkit-plugin-xz-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-debugsourceUpgrade nbdkit-plugin-python3-debuginfoUpgrade nbdkit-plugin-vddkUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade libguestfs-xfsUpgrade virt-v2v-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-debuginfoUpgrade libguestfs-tools-c-debuginfoUpgrade supermin-debugsourceUpgrade libguestfs-java-debuginfoUpgrade qemu-kvm-tools-maUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade qemu-kvm-coreUpgrade libvirt-admin-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nss-debuginfoUpgrade nbdkit-plugin-xzUpgrade ruby-hivexUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-rbd-debuginfoUpgrade nbdkit-debugsourceUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade netcf-develUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-common-maUpgrade ruby-libguestfsUpgrade netcf-debugsourceUpgrade qemu-imgUpgrade ruby-hivex-debuginfoUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storageUpgrade sgabios-binUpgrade seabiosUpgrade libguestfs-java-develUpgrade perl-Sys-Virt-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-dbus-debugsourceUpgrade nbdkit-example-plugins-debuginfoUpgrade libiscsi-develUpgrade qemu-kvm-debuginfoUpgrade libvirt-nssUpgrade hivex-debugsourceUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-v2vUpgrade hivex-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade qemu-kvm-commonUpgrade nbdkit-plugin-gzip-debuginfoUpgrade libvirt-docsUpgrade netcf-libsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libguestfs-develUpgrade seavgabios-binUpgrade hivexUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libsUpgrade libguestfs-debugsourceUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-toolsUpgrade libssh2Upgrade libguestfs-gfs2Upgrade nbdkitUpgrade supermin-develUpgrade netcf-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade lua-guestfsUpgrade libvirt-daemon-debuginfoUpgrade seabios-binUpgrade libvirt-lock-sanlock-debuginfoUpgrade sgabiosUpgrade virt-dibUpgrade libguestfs-javadocUpgrade qemu-kvm-core-debuginfoUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logicalUpgrade superminUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade libvirt-lock-sanlockUpgrade libiscsi-utilsUpgrade libguestfs-benchmarking-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-sshUpgrade qemu-kvmUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-debuginfoUpgrade hivex-develUpgrade libssh2-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade nbdkit-plugin-python-commonUpgrade python3-libguestfsUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade python3-libvirtUpgrade perl-Sys-Virt-debugsourceUpgrade libguestfs-rescueUpgrade libssh2-debugsourceUpgrade qemu-img-debuginfoUpgrade ruby-libguestfs-debuginfoUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-debuginfoUpgrade perl-Sys-GuestfsUpgrade nbdkit-plugin-python3Upgrade libvirt-adminUpgrade netcfUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-develUpgrade nbdkit-plugin-gzipUpgrade qemu-kvm-common-debuginfoUpgrade qemu-img-maUpgrade libguestfs-winsupportUpgrade nbdkit-basic-plugins-debuginfoUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-bash-completionUpgrade libiscsiUpgrade python3-libvirt-debuginfoUpgrade perl-hivex-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-libs-debuginfoUpgrade netcf-libs-debuginfoUpgrade libvirt-develUpgrade qemu-guest-agentUpgrade qemu-kvm-maUpgrade libiscsi-utils-debuginfoUpgrade libvirt-bash-completionUpgrade SLOFUpgrade libvirt-debugsourceUpgrade nbdkit-develUpgrade perl-Sys-Guestfs-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade virt-dib-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-plugin-vddk-debuginfoUpgrade libguestfs-benchmarkingUpgrade nbdkit-bash-completionUpgrade libvirt-daemonUpgrade libguestfs-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libguestfs-man-pages-jaUpgrade libvirt-dbus-debuginfoUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-block-glusterUpgrade libguestfs-gobject-debuginfoUpgrade python3-hivexUpgrade libguestfsUpgrade libguestfs-inspect-iconsUpgrade lua-guestfs-debuginfoUpgrade python3-hivex-debuginfo | May 15, 2019 | May 14, 2019 |
| Suse | — | Upgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-s390Upgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade xen-doc-htmlUpgrade xen-libs-32bitUpgrade qemu-audio-alsaUpgrade xenUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-block-dmgUpgrade xen-toolsUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-armUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-sgabios | Apr 17, 2019 | Apr 17, 2019 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu | May 15, 2019 | Apr 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub