Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134) - CVE-2024-3446: Fixed DM reentrancy issue that could lead to double free vulnerability (bsc#1222843) - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134) - CVE-2024-3446: Fixed DM reentrancy issue that could lead to double free vulnerability (bsc#1222843) - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1213269
- https://bugzilla.suse.com/1218889
- https://bugzilla.suse.com/1220134
- https://bugzilla.suse.com/1222843
- https://bugzilla.suse.com/1222845
- https://www.suse.com/security/cve/CVE-2023-3019
- https://www.suse.com/security/cve/CVE-2023-6683
- https://www.suse.com/security/cve/CVE-2024-24474
- https://www.suse.com/security/cve/CVE-2024-3446
- https://www.suse.com/security/cve/CVE-2024-3447
- https://www.suse.com/support/update/announcement/2024/suse-su-20241394-1/