A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicious guest controlling certain input can read out of bounds memory. A malicious user could use this flaw leading to disclosure of sensitive information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Oct 1, 2024 | Feb 18, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 18, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade netcf-libsUpgrade sgabios-binUpgrade supermin-develUpgrade qemu-block-iscsiUpgrade libguestfs-javaUpgrade python3-hivexUpgrade libguestfs-develUpgrade libguestfs-xfsUpgrade hivex-develUpgrade ivshmem-toolsUpgrade libvirt-daemonUpgrade virt-dibUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-secretUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-kvm-commonUpgrade netcfUpgrade nbdfuseUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-rsyncUpgrade libvirt-adminUpgrade virt-v2vUpgrade libvirt-libsUpgrade seabios-binUpgrade libguestfs-toolsUpgrade libvirt-daemon-kvmUpgrade nbdkit-xz-filterUpgrade qemu-guest-agentUpgrade libguestfs-bash-completionUpgrade nbdkit-ssh-pluginUpgrade qemu-system-aarch64-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-networkUpgrade libiscsi-develUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-javadocUpgrade superminUpgrade libguestfs-java-develUpgrade qemu-kvm-block-curlUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-dbusUpgrade qemu-kvm-block-iscsiUpgrade libvirt-develUpgrade nbdkit-bash-completionUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-jaUpgrade python3-libvirtUpgrade libguestfs-benchmarkingUpgrade qemu-block-glusterUpgrade libnbdUpgrade libiscsi-utilsUpgrade nbdkitUpgrade libguestfs-gfs2Upgrade nbdkit-example-pluginsUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade sgabiosUpgrade qemu-kvm-block-sshUpgrade netcf-develUpgrade qemu-kvm-block-glusterUpgrade qemu-imgUpgrade libiscsiUpgrade libguestfs-inspect-iconsUpgrade libguestfsUpgrade libvirt-daemon-driver-interfaceUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-python-pluginUpgrade hivexUpgrade nbdkit-develUpgrade qemu-system-x86Upgrade nbdkit-vddk-pluginUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-networkUpgrade python3-libguestfsUpgrade perl-Sys-GuestfsUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobjectUpgrade seavgabios-binUpgrade qemu-kvm-coreUpgrade nbdkit-curl-pluginUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-iscsiUpgrade perl-hivexUpgrade libvirt-clientUpgrade ruby-hivexUpgrade qemu-system-aarch64Upgrade nbdkit-serverUpgrade libvirt-lock-sanlockUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-libguestfsUpgrade lua-guestfsUpgrade libguestfs-rescueUpgrade nbdkit-gzip-pluginUpgrade libvirtUpgrade qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-winsupportUpgrade seabiosUpgrade libvirt-docs | Feb 5, 2022 | Nov 10, 2021 |
| Ubuntu | — | Upgrade qemu | Nov 19, 2024 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub