[SECURITY] [DLA 1351-1] qemu security update

2018-04-1714:48:41

lists.debian.org

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

31.5%

JSON

Package : qemu
Version : 1.1.2+dfsg-6+deb7u25
CVE ID : CVE-2018-7550
Debian Bug : 892041

The load_multiboot function in hw/i386/multiboot.c in Quick Emulator
(aka QEMU) allows local guest OS users to execute arbitrary code on
the QEMU host via a mh_load_end_addr value greater than
mh_bss_end_addr, which triggers an out-of-bounds read or write memory
access.

For Debian 7 "Wheezy", these problems have been fixed in version
1.1.2+dfsg-6+deb7u25.

We recommend that you upgrade your qemu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian9amd64qemu-system-x86-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-system-x86-dbgsym_1:2.8+dfsg-6+deb9u4_amd64.deb
Debian9armelqemu-system-sparc< 1:2.8+dfsg-6+deb9u4qemu-system-sparc_1:2.8+dfsg-6+deb9u4_armel.deb
Debian9amd64qemu-system-mips-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-system-mips-dbgsym_1:2.8+dfsg-6+deb9u4_amd64.deb
Debian9arm64qemu-system-misc-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-system-misc-dbgsym_1:2.8+dfsg-6+deb9u4_arm64.deb
Debian9armhfqemu-system-arm< 1:2.8+dfsg-6+deb9u4qemu-system-arm_1:2.8+dfsg-6+deb9u4_armhf.deb
Debian9armelqemu-block-extra< 1:2.8+dfsg-6+deb9u4qemu-block-extra_1:2.8+dfsg-6+deb9u4_armel.deb
Debian9arm64qemu-block-extra-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-block-extra-dbgsym_1:2.8+dfsg-6+deb9u4_arm64.deb
Debian9s390xqemu-system-ppc-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-system-ppc-dbgsym_1:2.8+dfsg-6+deb9u4_s390x.deb
Debian9armelqemu-system-sparc-dbgsym< 1:2.8+dfsg-6+deb9u4qemu-system-sparc-dbgsym_1:2.8+dfsg-6+deb9u4_armel.deb
Debian8amd64qemu-user-binfmt< 1:2.1+dfsg-12+deb8u7qemu-user-binfmt_1:2.1+dfsg-12+deb8u7_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	amd64	qemu-system-x86-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-system-x86-dbgsym_1:2.8+dfsg-6+deb9u4_amd64.deb
Debian	9	armel	qemu-system-sparc	< 1:2.8+dfsg-6+deb9u4	qemu-system-sparc_1:2.8+dfsg-6+deb9u4_armel.deb
Debian	9	amd64	qemu-system-mips-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-system-mips-dbgsym_1:2.8+dfsg-6+deb9u4_amd64.deb
Debian	9	arm64	qemu-system-misc-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-system-misc-dbgsym_1:2.8+dfsg-6+deb9u4_arm64.deb
Debian	9	armhf	qemu-system-arm	< 1:2.8+dfsg-6+deb9u4	qemu-system-arm_1:2.8+dfsg-6+deb9u4_armhf.deb
Debian	9	armel	qemu-block-extra	< 1:2.8+dfsg-6+deb9u4	qemu-block-extra_1:2.8+dfsg-6+deb9u4_armel.deb
Debian	9	arm64	qemu-block-extra-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-block-extra-dbgsym_1:2.8+dfsg-6+deb9u4_arm64.deb
Debian	9	s390x	qemu-system-ppc-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-system-ppc-dbgsym_1:2.8+dfsg-6+deb9u4_s390x.deb
Debian	9	armel	qemu-system-sparc-dbgsym	< 1:2.8+dfsg-6+deb9u4	qemu-system-sparc-dbgsym_1:2.8+dfsg-6+deb9u4_armel.deb
Debian	8	amd64	qemu-user-binfmt	< 1:2.1+dfsg-12+deb8u7	qemu-user-binfmt_1:2.1+dfsg-12+deb8u7_amd64.deb