FlawAtlas
Search the atlas
SUSE-SU-2023:3721-1 Not scored

Security update for qemu

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712) - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880) - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205) - CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382) - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. (bsc#1212850) - CVE-2023-3180: Fixed a heap buffer overflow in virtio_crypto_sym_op_helper(). (bsc#1213925) - CVE-2021-3638: Fixed an out-of-bounds write due to an inconsistent check in ati_2d_blt(). (bsc#1188609) - CVE-2021-3750: Fixed an use-after-free in DMA reentrancy issue. (bsc#1190011) - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653). The following non-security bug was fixed: - Prepare for binutils update to 2.41 update (bsc#1215311).

Exploit probability Not scored
Published September 21, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS qemu
SUSE:Linux Enterprise Server 15 SP2-LTSS qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 qemu
openSUSE:Leap 15.4 qemu

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:3721-1

This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712) - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880) - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205) - CVE-2020-13754: Fixed a DoS due to an OOB access during mmio operations. (bsc#1172382) - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. (bsc#1212850) - CVE-2023-3180: Fixed a heap buffer overflow in virtio_crypto_sym_op_helper(). (bsc#1213925) - CVE-2021-3638: Fixed an out-of-bounds write due to an inconsistent check in ati_2d_blt(). (bsc#1188609) - CVE-2021-3750: Fixed an use-after-free in DMA reentrancy issue. (bsc#1190011) - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). - CVE-2022-1050: Fixed use-after-free issue in pvrdma_exec_cmd() (bsc#1197653). The following non-security bug was fixed: - Prepare for binutils update to 2.41 update (bsc#1215311).

View original source

05 / REFERENCES

Further evidence