Lucene search

DebianDEBIAN:DLA-1070-1:8671F

HistoryAug 28, 2017 - 8:01 a.m.

[SECURITY] [DLA 1070-1] qemu security update

2017-08-2808:01:19

lists.debian.org

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

25.6%

JSON

Package : qemu
Version : 1.1.2+dfsg-6+deb7u23
CVE ID : CVE-2017-6505 CVE-2017-8309 CVE-2017-10664 CVE-2017-11434

Multiple vulnerabilities were discovered in qemu, a fast processor
emulator. The Common Vulnerabilities and Exposures project identifies
the following problems:

CVE-2017-6505

Denial of service via infinite loop in the USB OHCI emulation

CVE-2017-8309

Denial of service via VNC audio capture

CVE-2017-10664

Denial of service in qemu-nbd server, qemu-io and qemu-img

CVE-2017-11434

Denial of service via a crafted DHCP options string

For Debian 7 "Wheezy", these problems have been fixed in version
1.1.2+dfsg-6+deb7u23.

We recommend that you upgrade your qemu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian7armhfqemu< 1.1.2+dfsg-6+deb7u23qemu_1.1.2+dfsg-6+deb7u23_armhf.deb
Debian9mipsqemu-system< 1:2.8+dfsg-6+deb9u2qemu-system_1:2.8+dfsg-6+deb9u2_mips.deb
Debian9amd64qemu-user-binfmt< 1:2.8+dfsg-6+deb9u2qemu-user-binfmt_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian9amd64qemu-system-misc< 1:2.8+dfsg-6+deb9u2qemu-system-misc_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian9armhfqemu-system-common< 1:2.8+dfsg-6+deb9u2qemu-system-common_1:2.8+dfsg-6+deb9u2_armhf.deb
Debian8armelqemu-user< 1:2.1+dfsg-12+deb8u7qemu-user_1:2.1+dfsg-12+deb8u7_armel.deb
Debian9amd64qemu-block-extra-dbgsym< 1:2.8+dfsg-6+deb9u2qemu-block-extra-dbgsym_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian7amd64qemu-user< 1.1.2+dfsg-6+deb7u23qemu-user_1.1.2+dfsg-6+deb7u23_amd64.deb
Debian9arm64qemu-user-static-dbgsym< 1:2.8+dfsg-6+deb9u2qemu-user-static-dbgsym_1:2.8+dfsg-6+deb9u2_arm64.deb
Debian9armhfqemu-user-static< 1:2.8+dfsg-6+deb9u2qemu-user-static_1:2.8+dfsg-6+deb9u2_armhf.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armhf	qemu	< 1.1.2+dfsg-6+deb7u23	qemu_1.1.2+dfsg-6+deb7u23_armhf.deb
Debian	9	mips	qemu-system	< 1:2.8+dfsg-6+deb9u2	qemu-system_1:2.8+dfsg-6+deb9u2_mips.deb
Debian	9	amd64	qemu-user-binfmt	< 1:2.8+dfsg-6+deb9u2	qemu-user-binfmt_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian	9	amd64	qemu-system-misc	< 1:2.8+dfsg-6+deb9u2	qemu-system-misc_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian	9	armhf	qemu-system-common	< 1:2.8+dfsg-6+deb9u2	qemu-system-common_1:2.8+dfsg-6+deb9u2_armhf.deb
Debian	8	armel	qemu-user	< 1:2.1+dfsg-12+deb8u7	qemu-user_1:2.1+dfsg-12+deb8u7_armel.deb
Debian	9	amd64	qemu-block-extra-dbgsym	< 1:2.8+dfsg-6+deb9u2	qemu-block-extra-dbgsym_1:2.8+dfsg-6+deb9u2_amd64.deb
Debian	7	amd64	qemu-user	< 1.1.2+dfsg-6+deb7u23	qemu-user_1.1.2+dfsg-6+deb7u23_amd64.deb
Debian	9	arm64	qemu-user-static-dbgsym	< 1:2.8+dfsg-6+deb9u2	qemu-user-static-dbgsym_1:2.8+dfsg-6+deb9u2_arm64.deb
Debian	9	armhf	qemu-user-static	< 1:2.8+dfsg-6+deb9u2	qemu-user-static_1:2.8+dfsg-6+deb9u2_armhf.deb