Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.4.2021.1243.1
Category:SuSE Local Security Checks
Title:SUSE: Security Advisory (SUSE-SU-2021:1243-1)
Summary:The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2021:1243-1 advisory.
Description:Summary:
The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2021:1243-1 advisory.

Vulnerability Insight:
This update for qemu fixes the following issues:

CVE-2020-12829: Fix OOB access in sm501 device emulation (bsc#1172385)

CVE-2020-25723: Fix use-after-free in usb xhci packet handling
(bsc#1178934)

CVE-2020-25084: Fix use-after-free in usb ehci packet handling
(bsc#1176673)

CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci emulation
(bsc#1176684)

CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation (bsc#1176682)

CVE-2020-27617: Fix guest triggerable assert in shared network handling
code (bsc#1178174)

CVE-2020-28916: Fix infinite loop (DoS) in e1000e device emulation
(bsc#1179468)

CVE-2020-29443: Fix OOB access in atapi emulation (bsc#1181108)

CVE-2020-27821: Fix heap overflow in MSIx emulation (bsc#1179686)

CVE-2020-15469: Fix null pointer deref. (DoS) in mmio ops (bsc#1173612)

CVE-2021-20257: Fix infinite loop (DoS) in e1000 device emulation
(bsc#1182577)

CVE-2021-3416: Fix OOB access (stack overflow) in rtl8139 NIC emulation
(bsc#1182968)

CVE-2021-3416: Fix OOB access (stack overflow) in other NIC emulations
(bsc#1182968)

CVE-2020-27616: Fix OOB access in ati-vga emulation (bsc#1178400)

CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet processing
(bsc#1179466, CVE-2020-29130, bsc#1179467)

Fix package scripts to not use hard coded paths for temporary working
directories and log files (bsc#1182425)

Add split-provides through forsplits/13 to cover updates of SLE15-SP2 to
SLE15-SP3, and openSUSE equivalents (bsc#1184064)

Added a few more usability improvements for our git packaging workflow

Affected Software/OS:
'qemu' package(s) on SUSE MicroOS 5.0, SUSE Linux Enterprise Module for Server Applications 15-SP2, SUSE Linux Enterprise Module for Basesystem 15-SP2

Solution:
Please install the updated package(s).

CVSS Score:
4.7

CVSS Vector:
AV:L/AC:M/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2021-3416
https://bugzilla.redhat.com/show_bug.cgi?id=1932827
https://www.openwall.com/lists/oss-security/2021/02/26/1
https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

This is only one of 97459 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.