A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-ui-sdlUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-ui-cursesUpgrade qemu-user-binfmtUpgrade qemu-system-aarch64Upgrade qemu-block-dmgUpgrade qemu-user-staticUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-x86-coreUpgrade qemu-audio-ossUpgrade qemu-debuginfoUpgrade qemu-audio-paUpgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-audio-sdlUpgrade qemu-userUpgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-block-ssh | Aug 24, 2023 | Aug 3, 2023 |
| Debian | — | Upgrade qemu | Oct 10, 2023 | Aug 3, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade qemu-img | Jan 10, 2024 | Aug 3, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Aug 3, 2023 |
| Oracle_linux | — | Upgrade libguestfs-gfs2Upgrade virt-v2v-man-pages-jaUpgrade libguestfs-rescueUpgrade nbdkit-serverUpgrade qemu-block-glusterUpgrade libguestfs-rsyncUpgrade libvirt-wiresharkUpgrade libiscsi-develUpgrade ivshmem-toolsUpgrade libvirt-adminUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade libnbd-develUpgrade perl-Sys-GuestfsUpgrade libguestfs-xfsUpgrade swtpmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade virt-v2v-bash-completionUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade nbdkit-python-pluginUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcfUpgrade python3-libguestfsUpgrade libguestfs-man-pages-jaUpgrade perl-hivexUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade netcf-develUpgrade nbdkit-tmpdisk-pluginUpgrade libguestfs-tools-cUpgrade libvirt-develUpgrade qemuUpgrade sgabiosUpgrade nbdkit-basic-filtersUpgrade nbdkit-tar-filterUpgrade nbdkit-vddk-pluginUpgrade ruby-hivexUpgrade seavgabios-binUpgrade qemu-system-aarch64Upgrade swtpm-develUpgrade nbdkitUpgrade sgabios-binUpgrade libguestfs-javadocUpgrade superminUpgrade libguestfs-bash-completionUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-ssh-pluginUpgrade libguestfs-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade virt-v2vUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-rbdUpgrade nbdkit-bash-completionUpgrade qemu-kvm-commonUpgrade python3-hivexUpgrade nbdkit-xz-filterUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-nwfilterUpgrade seabios-binUpgrade python3-libnbdUpgrade nbdkit-gzip-filterUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-winsupportUpgrade libguestfs-inspect-iconsUpgrade qemu-virtiofsdUpgrade libvirt-lock-sanlockUpgrade nbdkit-nbd-pluginUpgrade qemu-kvmUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-develUpgrade virt-dibUpgrade swtpm-libsUpgrade nbdfuseUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-benchmarkingUpgrade hivexUpgrade libvirt-bash-completionUpgrade qemu-guest-agentUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libtpms-develUpgrade libnbd-bash-completionUpgrade libiscsiUpgrade qemu-system-x86-coreUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade libguestfs-applianceUpgrade virt-v2v-man-pages-ukUpgrade swtpm-toolsUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-system-aarch64-coreUpgrade libvirt-daemon-driver-secretUpgrade qemu-imgUpgrade seabiosUpgrade libtpmsUpgrade libnbdUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-commonUpgrade libguestfs-gobjectUpgrade nbdkit-gzip-pluginUpgrade swtpm-tools-pkcs11Upgrade python3-libvirtUpgrade libguestfs-javaUpgrade qemu-kvm-block-sshUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libguestfsUpgrade nbdkit-curl-pluginUpgrade qemu-kvm-block-glusterUpgrade qemu-block-rbdUpgrade nbdkit-tar-pluginUpgrade libvirt-dbusUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storageUpgrade ruby-libguestfsUpgrade supermin-develUpgrade libiscsi-utils | Sep 23, 2023 | Aug 3, 2023 |
| Suse | — | Upgrade qemu-block-dmgUpgrade qemu-ivshmem-toolsUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-sdlUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-SLOFUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-ui-dbusUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-sdlUpgrade qemu-hw-usb-hostUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-accel-qtestUpgrade qemu-audio-dbusUpgrade qemu-accel-tcg-x86Upgrade qemu-extraUpgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-hw-usb-smartcardUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-spiceUpgrade qemu-audio-jackUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-ipxe | Aug 29, 2023 | Aug 3, 2023 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-miscUpgrade qemu-system-xenUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-armUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-block-extra (Ubuntu Pro) | Jan 9, 2024 | Aug 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub