QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privileges of the QEMU process.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | qemu | < 2.0.0+dfsg-1 | qemu_2.0.0+dfsg-1_all.deb |
Debian | 11 | all | qemu | < 2.0.0+dfsg-1 | qemu_2.0.0+dfsg-1_all.deb |
Debian | 10 | all | qemu | < 2.0.0+dfsg-1 | qemu_2.0.0+dfsg-1_all.deb |
Debian | 999 | all | qemu | < 2.0.0+dfsg-1 | qemu_2.0.0+dfsg-1_all.deb |
Debian | 13 | all | qemu | < 2.0.0+dfsg-1 | qemu_2.0.0+dfsg-1_all.deb |