The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade nbdkit-tar-pluginUpgrade qemu-kvmUpgrade libvirt-daemon-driver-qemuUpgrade python3-libnbdUpgrade libvirt-nssUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libsUpgrade qemu-kvm-commonUpgrade netcf-develUpgrade virt-dibUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-develUpgrade netcfUpgrade libiscsi-develUpgrade libvirt-develUpgrade seabios-binUpgrade nbdkit-example-pluginsUpgrade virt-v2vUpgrade nbdkit-xz-filterUpgrade qemu-virtiofsdUpgrade libguestfs-winsupportUpgrade libtpmsUpgrade seavgabios-binUpgrade libguestfsUpgrade supermin-develUpgrade nbdkit-ssh-pluginUpgrade ruby-hivexUpgrade swtpm-develUpgrade libguestfs-inspect-iconsUpgrade libiscsi-utilsUpgrade perl-hivexUpgrade libguestfs-javadocUpgrade swtpm-tools-pkcs11Upgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-glusterUpgrade swtpm-toolsUpgrade libvirt-wiresharkUpgrade libguestfs-javaUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libvirtUpgrade libnbd-bash-completionUpgrade hivex-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-interfaceUpgrade nbdfuseUpgrade libvirt-daemonUpgrade libvirtUpgrade libtpms-develUpgrade libvirt-client-qemuUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-pluginUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-bash-completionUpgrade libguestfs-toolsUpgrade nbdkit-gzip-filterUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-vddk-pluginUpgrade libnbd-develUpgrade libnbdUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-curlUpgrade qemu-imgUpgrade python3-hivexUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-sshUpgrade superminUpgrade qemu-kvm-coreUpgrade perl-Sys-VirtUpgrade nbdkit-tar-filterUpgrade libguestfs-rsyncUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-nbd-pluginUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-basic-pluginsUpgrade libvirt-lock-sanlockUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gfs2Upgrade libguestfs-applianceUpgrade qemu-kvm-block-rbdUpgrade sgabios-binUpgrade python3-libguestfsUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsiUpgrade libguestfs-xfsUpgrade libguestfs-rescueUpgrade libguestfs-develUpgrade hivexUpgrade virt-v2v-bash-completionUpgrade swtpm-libsUpgrade ruby-libguestfsUpgrade qemu-guest-agentUpgrade nbdkit-basic-filtersUpgrade swtpmUpgrade sgabiosUpgrade libguestfs-java-develUpgrade qemu-kvm-block-iscsi | Apr 11, 2024 | Feb 20, 2024 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-ivshmem-toolsUpgrade qemu-langUpgrade qemu-block-dmgUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-audio-paUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-audio-dbusUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-dbusUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-microvmUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-SLOFUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-accel-qtestUpgrade qemu-ksmUpgrade qemu-hw-usb-hostUpgrade qemu-ui-spice-coreUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-jackUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-seabios | Apr 4, 2024 | Feb 20, 2024 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-x86-xen | Aug 14, 2024 | Feb 20, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub