The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 9, 2024 | Mar 23, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Mar 23, 2023 |
| Oracle_linux | — | Upgrade libnbd-develUpgrade nbdkit-gzip-pluginUpgrade libguestfs-man-pages-ukUpgrade perl-Sys-VirtUpgrade libguestfs-develUpgrade libguestfs-man-pages-jaUpgrade netcfUpgrade libguestfs-rescueUpgrade nbdkit-python-pluginUpgrade nbdkit-tar-pluginUpgrade nbdkit-xz-filterUpgrade libguestfs-tools-cUpgrade libnbd-bash-completionUpgrade libvirt-lock-sanlockUpgrade qemu-kvmUpgrade nbdkit-linuxdisk-pluginUpgrade python3-libguestfsUpgrade libiscsi-utilsUpgrade virt-v2v-bash-completionUpgrade python3-hivexUpgrade libiscsiUpgrade libtpms-develUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-bash-completionUpgrade swtpm-tools-pkcs11Upgrade netcf-libsUpgrade swtpm-toolsUpgrade nbdfuseUpgrade nbdkitUpgrade nbdkit-nbd-pluginUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-curl-pluginUpgrade libguestfs-bash-completionUpgrade libguestfs-winsupportUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-rsyncUpgrade qemu-guest-agentUpgrade nbdkit-serverUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-block-curlUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-wiresharkUpgrade libnbdUpgrade libguestfsUpgrade nbdkit-gzip-filterUpgrade qemu-kvm-block-rbdUpgrade libvirt-develUpgrade nbdkit-vddk-pluginUpgrade virt-v2v-man-pages-ukUpgrade libguestfs-java-develUpgrade qemu-kvm-block-sshUpgrade sgabios-binUpgrade libguestfs-inspect-iconsUpgrade supermin-develUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libsUpgrade lua-guestfsUpgrade qemu-kvm-commonUpgrade virt-v2vUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gfs2Upgrade perl-hivexUpgrade sgabiosUpgrade libtpmsUpgrade swtpm-libsUpgrade libvirt-daemon-driver-nodedevUpgrade swtpm-develUpgrade libguestfs-javaUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade swtpmUpgrade libvirt-clientUpgrade libguestfs-gobjectUpgrade nbdkit-develUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-xfsUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-kvmUpgrade ruby-libguestfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-basic-filtersUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-applianceUpgrade libiscsi-develUpgrade netcf-develUpgrade nbdkit-tar-filterUpgrade hivexUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libnbdUpgrade ruby-hivexUpgrade libvirt-docsUpgrade seabios-binUpgrade nbdkit-tmpdisk-pluginUpgrade python3-libvirtUpgrade superminUpgrade libvirt-daemon-config-networkUpgrade libguestfs-toolsUpgrade qemu-imgUpgrade seabiosUpgrade seavgabios-binUpgrade libguestfs-javadocUpgrade hivex-devel | May 17, 2023 | Feb 27, 2023 |
| Suse | — | Upgrade qemu-block-dmgUpgrade qemu-chardev-spiceUpgrade qemu-audio-jackUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-block-iscsiUpgrade qemu-audio-dbusUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-glusterUpgrade qemu-seabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-SLOFUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-hw-usb-hostUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-alsaUpgrade qemu-accel-qtestUpgrade qemu-vgabiosUpgrade qemu-ui-dbusUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-accel-tcg-x86Upgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-sgabios | Apr 4, 2024 | Mar 23, 2023 |
| Ubuntu | — | Upgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-xenUpgrade qemuUpgrade qemu-system-misc | Jan 9, 2024 | Mar 23, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub