Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3595: Fixed an invalid pointer initialization may lead to information disclosure (tftp). (bsc#1187366) - CVE-2021-3592: Fixed an invalid pointer initialization may lead to information disclosure (bootp). (bsc#1187364) - CVE-2021-3594: Fixed an invalid pointer initialization may lead to information disclosure (udp). (bsc#1187367) - CVE-2021-3593: Fixed an invalid pointer initialization may lead to information disclosure (udp6). (bsc#1187365) - CVE-2021-3611: Fixed a segmentation fault due to stack overflow. (bsc#1187529)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2021-3595: Fixed an invalid pointer initialization may lead to information disclosure (tftp). (bsc#1187366) - CVE-2021-3592: Fixed an invalid pointer initialization may lead to information disclosure (bootp). (bsc#1187364) - CVE-2021-3594: Fixed an invalid pointer initialization may lead to information disclosure (udp). (bsc#1187367) - CVE-2021-3593: Fixed an invalid pointer initialization may lead to information disclosure (udp6). (bsc#1187365) - CVE-2021-3611: Fixed a segmentation fault due to stack overflow. (bsc#1187529)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1187364
- https://bugzilla.suse.com/1187365
- https://bugzilla.suse.com/1187366
- https://bugzilla.suse.com/1187367
- https://bugzilla.suse.com/1187529
- https://www.suse.com/security/cve/CVE-2021-3592
- https://www.suse.com/security/cve/CVE-2021-3593
- https://www.suse.com/security/cve/CVE-2021-3594
- https://www.suse.com/security/cve/CVE-2021-3595
- https://www.suse.com/security/cve/CVE-2021-3611
- https://www.suse.com/support/update/announcement/2021/suse-su-20212428-1/