[SECURITY] [DSA 4338-1] qemu security update

2018-11-1117:59:48

lists.debian.org

460

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

JSON

Debian Security Advisory DSA-4338-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
November 11, 2018 https://www.debian.org/security/faq

Package : qemu
CVE ID : CVE-2018-10839 CVE-2018-17962 CVE-2018-17963
Debian Bug : 908682 910431 911468 911469

Integer overflows in the processing of packets in network cards emulated
by QEMU, a fast processor emulator, could result in denial of service.

In addition this update backports support to passthrough the new CPU
features added in the intel-microcode update shipped in DSA 4273 to
x86-based guests.

For the stable distribution (stretch), these problems have been fixed in
version 1:2.8+dfsg-6+deb9u5.

We recommend that you upgrade your qemu packages.

For the detailed security status of qemu please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/qemu

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9mipsqemu-user-binfmt< 1:2.8+dfsg-6+deb9u5qemu-user-binfmt_1:2.8+dfsg-6+deb9u5_mips.deb
Debian9mips64elqemu-guest-agent-dbgsym< 1:2.8+dfsg-6+deb9u5qemu-guest-agent-dbgsym_1:2.8+dfsg-6+deb9u5_mips64el.deb
Debian8i386qemu-system-arm< 1:2.1+dfsg-12+deb8u8qemu-system-arm_1:2.1+dfsg-12+deb8u8_i386.deb
Debian8i386qemu-system-common< 1:2.1+dfsg-12+deb8u8qemu-system-common_1:2.1+dfsg-12+deb8u8_i386.deb
Debian9i386qemu-utils-dbgsym< 1:2.8+dfsg-6+deb9u5qemu-utils-dbgsym_1:2.8+dfsg-6+deb9u5_i386.deb
Debian9i386qemu-system-x86< 1:2.8+dfsg-6+deb9u5qemu-system-x86_1:2.8+dfsg-6+deb9u5_i386.deb
Debian8i386qemu-system-x86< 1:2.1+dfsg-12+deb8u8qemu-system-x86_1:2.1+dfsg-12+deb8u8_i386.deb
Debian9arm64qemu-system-common-dbgsym< 1:2.8+dfsg-6+deb9u5qemu-system-common-dbgsym_1:2.8+dfsg-6+deb9u5_arm64.deb
Debian9arm64qemu-system-x86-dbgsym< 1:2.8+dfsg-6+deb9u5qemu-system-x86-dbgsym_1:2.8+dfsg-6+deb9u5_arm64.deb
Debian9mipselqemu-system-sparc-dbgsym< 1:2.8+dfsg-6+deb9u5qemu-system-sparc-dbgsym_1:2.8+dfsg-6+deb9u5_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	mips	qemu-user-binfmt	< 1:2.8+dfsg-6+deb9u5	qemu-user-binfmt_1:2.8+dfsg-6+deb9u5_mips.deb
Debian	9	mips64el	qemu-guest-agent-dbgsym	< 1:2.8+dfsg-6+deb9u5	qemu-guest-agent-dbgsym_1:2.8+dfsg-6+deb9u5_mips64el.deb
Debian	8	i386	qemu-system-arm	< 1:2.1+dfsg-12+deb8u8	qemu-system-arm_1:2.1+dfsg-12+deb8u8_i386.deb
Debian	8	i386	qemu-system-common	< 1:2.1+dfsg-12+deb8u8	qemu-system-common_1:2.1+dfsg-12+deb8u8_i386.deb
Debian	9	i386	qemu-utils-dbgsym	< 1:2.8+dfsg-6+deb9u5	qemu-utils-dbgsym_1:2.8+dfsg-6+deb9u5_i386.deb
Debian	9	i386	qemu-system-x86	< 1:2.8+dfsg-6+deb9u5	qemu-system-x86_1:2.8+dfsg-6+deb9u5_i386.deb
Debian	8	i386	qemu-system-x86	< 1:2.1+dfsg-12+deb8u8	qemu-system-x86_1:2.1+dfsg-12+deb8u8_i386.deb
Debian	9	arm64	qemu-system-common-dbgsym	< 1:2.8+dfsg-6+deb9u5	qemu-system-common-dbgsym_1:2.8+dfsg-6+deb9u5_arm64.deb
Debian	9	arm64	qemu-system-x86-dbgsym	< 1:2.8+dfsg-6+deb9u5	qemu-system-x86-dbgsym_1:2.8+dfsg-6+deb9u5_arm64.deb
Debian	9	mipsel	qemu-system-sparc-dbgsym	< 1:2.8+dfsg-6+deb9u5	qemu-system-sparc-dbgsym_1:2.8+dfsg-6+deb9u5_mipsel.deb