Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-3446: Fixed DMA reentrancy issue leads to double free vulnerability (bsc#1222843) - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for qemu fixes the following issues: - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-3446: Fixed DMA reentrancy issue leads to double free vulnerability (bsc#1222843) - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1213269
- https://bugzilla.suse.com/1218889
- https://bugzilla.suse.com/1222843
- https://bugzilla.suse.com/1222845
- https://www.suse.com/security/cve/CVE-2023-3019
- https://www.suse.com/security/cve/CVE-2023-6683
- https://www.suse.com/security/cve/CVE-2024-3446
- https://www.suse.com/security/cve/CVE-2024-3447
- https://www.suse.com/support/update/announcement/2024/suse-su-20241438-1/