Alibaba Cloud Linux 3 : 0058: virt:rhel and virt-devel:rhel (ALINUX3-SA-2021:0058)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0058 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-13754: hw/pci/msix.c in QEMU 4.2....

Linux Distros Unpatched Vulnerability : CVE-2014-0148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing...

Linux Distros Unpatched Vulnerability : CVE-2019-12155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - interfacereleaseresource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. CVE-2019-12155 Note that Nessus relies on the presence ...

OPENSUSE-SU-2021:1461-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS USB Attached SCSI device emulation bsc1189702 - CVE-2021-3748: Fix heap use-after-free in virtionetreceivercu bsc1189938 Non-security issues fixed: - Add transfer length item in...

SUSE-SU-2021:3614-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - Fix out-of-bounds write in UAS USB Attached SCSI device emulation bsc1189702, CVE-2021-3713 - Fix heap use-after-free in virtionetreceivercu bsc1189938, CVE-2021-3748 - usbredir: free call on invalid pointer in bufpalloc...

SUSE-SU-2021:3605-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS USB Attached SCSI device emulation bsc1189702 - CVE-2021-3748: Fix heap use-after-free in virtionetreceivercu bsc1189938 Non-security issues fixed: - Add transfer length item in...

SUSE-SU-2021:1241-1 Security update for qemu

This update for qemu fixes the following issues: - Fix OOB access in sm501 device emulation CVE-2020-12829, bsc1172385 - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation CVE-2020-13362, bsc1172383 - Fix use-after-free in usb xhci packet handling CVE-2020-25723, bsc1178934 - Fix...

SUSE-SU-2020:2237-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-14339: Don't leak /dev/mapper/control into QEMU. Use ioctl's to obtain the dependency tree of disks and drop use of libdevmapper. - bsc1161883, bsc1174458 - qemu: Setup emulator thread and cpuset.mems before exec - bsc1171946 - libxl:...

SUSE-SU-2015:2324-1 Security update for xen

This update fixes the following security issues: - bsc956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - Revert x86/IO-APIC: don't create pIRQ mapping from masked RTE until kernel maintenance release goes out. - bsc956592 - xen: virtual PMU is...