FlawAtlas
Search the atlas
SUSE-SU-2024:2983-1 Not scored

Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322) - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007) * nbd/server: Close stray clients at server-stop * nbd/server: Drop non-negotiating clients * nbd/server: Cap default max-connections to 100 * nbd/server: Plumb in new args to nbd_client_add() * nbd: Minor style and typo fixes - Update qemu to version 8.2.6

Exploit probability Not scored
Published August 20, 2024
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP6 qemu
SUSE:Linux Enterprise Module for Package Hub 15 SP6 qemu
SUSE:Linux Enterprise Module for Package Hub 15 SP6 qemu-linux-user
SUSE:Linux Enterprise Module for Server Applications 15 SP6 qemu
openSUSE:Leap 15.6 qemu
openSUSE:Leap 15.6 qemu-linux-user

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2024:2983-1

This update for qemu fixes the following issues: - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322) - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007) * nbd/server: Close stray clients at server-stop * nbd/server: Drop non-negotiating clients * nbd/server: Cap default max-connections to 100 * nbd/server: Plumb in new args to nbd_client_add() * nbd: Minor style and typo fixes - Update qemu to version 8.2.6

View original source

05 / REFERENCES

Further evidence