csaf_suse - suse-su-2021:1241-1

Vulnerability from csaf_suse

Published

2021-04-16 11:59

Modified

2021-04-16 11:59

Summary

Security update for qemu

Notes

Title of the patch

Security update for qemu

Description of the patch

This update for qemu fixes the following issues: - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499) - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499)

Patchnames

SUSE-2021-1241,SUSE-OpenStack-Cloud-9-2021-1241,SUSE-OpenStack-Cloud-Crowbar-9-2021-1241,SUSE-SLE-SAP-12-SP4-2021-1241,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1241

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for qemu",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for qemu fixes the following issues:\n\n- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)\n- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383)\n- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)\n- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)\n- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)\n- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)\n- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)\n- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)\n- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)\n- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)\n- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)\n- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)\n- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386)\n- Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523)\n- Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639)\n- Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)\n- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641)\n- Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137)\n- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384)\n- Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478)\n- Fix qemu-testsuite failure\n- Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115)\n- Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933)\n- Fix slowness in arm32 emulation (bsc#1112499)\n- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)\n- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383)\n- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)\n- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)\n- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)\n- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)\n- Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)\n- Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)\n- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)\n- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)\n- Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)\n- Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)\n- Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)\n- Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)\n- Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386)\n- Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523)\n- Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639)\n- Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)\n- Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641)\n- Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137)\n- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384)\n- Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478)\n- Fix qemu-testsuite failure\n- Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115)\n- Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933)\n- Fix slowness in arm32 emulation (bsc#1112499)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2021-1241,SUSE-OpenStack-Cloud-9-2021-1241,SUSE-OpenStack-Cloud-Crowbar-9-2021-1241,SUSE-SLE-SAP-12-SP4-2021-1241,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1241",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_1241-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2021:1241-1",
            url: "https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2021:1241-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1112499",
            url: "https://bugzilla.suse.com/1112499",
         },
         {
            category: "self",
            summary: "SUSE Bug 1119115",
            url: "https://bugzilla.suse.com/1119115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172383",
            url: "https://bugzilla.suse.com/1172383",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172384",
            url: "https://bugzilla.suse.com/1172384",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172385",
            url: "https://bugzilla.suse.com/1172385",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172386",
            url: "https://bugzilla.suse.com/1172386",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172478",
            url: "https://bugzilla.suse.com/1172478",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173612",
            url: "https://bugzilla.suse.com/1173612",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174386",
            url: "https://bugzilla.suse.com/1174386",
         },
         {
            category: "self",
            summary: "SUSE Bug 1174641",
            url: "https://bugzilla.suse.com/1174641",
         },
         {
            category: "self",
            summary: "SUSE Bug 1175441",
            url: "https://bugzilla.suse.com/1175441",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176673",
            url: "https://bugzilla.suse.com/1176673",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176682",
            url: "https://bugzilla.suse.com/1176682",
         },
         {
            category: "self",
            summary: "SUSE Bug 1176684",
            url: "https://bugzilla.suse.com/1176684",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178174",
            url: "https://bugzilla.suse.com/1178174",
         },
         {
            category: "self",
            summary: "SUSE Bug 1178934",
            url: "https://bugzilla.suse.com/1178934",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179466",
            url: "https://bugzilla.suse.com/1179466",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179467",
            url: "https://bugzilla.suse.com/1179467",
         },
         {
            category: "self",
            summary: "SUSE Bug 1179468",
            url: "https://bugzilla.suse.com/1179468",
         },
         {
            category: "self",
            summary: "SUSE Bug 1180523",
            url: "https://bugzilla.suse.com/1180523",
         },
         {
            category: "self",
            summary: "SUSE Bug 1181108",
            url: "https://bugzilla.suse.com/1181108",
         },
         {
            category: "self",
            summary: "SUSE Bug 1181639",
            url: "https://bugzilla.suse.com/1181639",
         },
         {
            category: "self",
            summary: "SUSE Bug 1181933",
            url: "https://bugzilla.suse.com/1181933",
         },
         {
            category: "self",
            summary: "SUSE Bug 1182137",
            url: "https://bugzilla.suse.com/1182137",
         },
         {
            category: "self",
            summary: "SUSE Bug 1182425",
            url: "https://bugzilla.suse.com/1182425",
         },
         {
            category: "self",
            summary: "SUSE Bug 1182577",
            url: "https://bugzilla.suse.com/1182577",
         },
         {
            category: "self",
            summary: "SUSE Bug 1182968",
            url: "https://bugzilla.suse.com/1182968",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11947 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11947/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12829 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12829/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13361 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13361/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13362 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13362/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13659 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13659/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13765 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13765/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-14364 page",
            url: "https://www.suse.com/security/cve/CVE-2020-14364/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15469 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15469/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15863 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15863/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-16092 page",
            url: "https://www.suse.com/security/cve/CVE-2020-16092/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25084 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25084/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25624 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25624/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25625 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25625/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-25723 page",
            url: "https://www.suse.com/security/cve/CVE-2020-25723/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-27617 page",
            url: "https://www.suse.com/security/cve/CVE-2020-27617/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-28916 page",
            url: "https://www.suse.com/security/cve/CVE-2020-28916/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-29129 page",
            url: "https://www.suse.com/security/cve/CVE-2020-29129/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-29130 page",
            url: "https://www.suse.com/security/cve/CVE-2020-29130/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-29443 page",
            url: "https://www.suse.com/security/cve/CVE-2020-29443/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-20181 page",
            url: "https://www.suse.com/security/cve/CVE-2021-20181/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-20203 page",
            url: "https://www.suse.com/security/cve/CVE-2021-20203/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-20221 page",
            url: "https://www.suse.com/security/cve/CVE-2021-20221/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-20257 page",
            url: "https://www.suse.com/security/cve/CVE-2021-20257/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-3416 page",
            url: "https://www.suse.com/security/cve/CVE-2021-3416/",
         },
      ],
      title: "Security update for qemu",
      tracking: {
         current_release_date: "2021-04-16T11:59:57Z",
         generator: {
            date: "2021-04-16T11:59:57Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2021:1241-1",
         initial_release_date: "2021-04-16T11:59:57Z",
         revision_history: [
            {
               date: "2021-04-16T11:59:57Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-arm-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-arm-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-arm-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-curl-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-block-curl-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-block-curl-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-dmg-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-block-dmg-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-block-dmg-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-rbd-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-block-rbd-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-block-rbd-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-ssh-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-block-ssh-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-block-ssh-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-extra-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-extra-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-extra-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-guest-agent-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-guest-agent-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-guest-agent-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-lang-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-lang-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-lang-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-linux-user-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-linux-user-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-linux-user-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-ppc-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-ppc-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-ppc-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-s390-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-s390-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-s390-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-tools-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-tools-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-tools-2.11.2-5.29.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-x86-2.11.2-5.29.1.aarch64",
                        product: {
                           name: "qemu-x86-2.11.2-5.29.1.aarch64",
                           product_id: "qemu-x86-2.11.2-5.29.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-2.11.2-5.29.1.i586",
                           product_id: "qemu-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-arm-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-arm-2.11.2-5.29.1.i586",
                           product_id: "qemu-arm-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-curl-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-block-curl-2.11.2-5.29.1.i586",
                           product_id: "qemu-block-curl-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-dmg-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-block-dmg-2.11.2-5.29.1.i586",
                           product_id: "qemu-block-dmg-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-iscsi-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-block-iscsi-2.11.2-5.29.1.i586",
                           product_id: "qemu-block-iscsi-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-ssh-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-block-ssh-2.11.2-5.29.1.i586",
                           product_id: "qemu-block-ssh-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-extra-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-extra-2.11.2-5.29.1.i586",
                           product_id: "qemu-extra-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-guest-agent-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-guest-agent-2.11.2-5.29.1.i586",
                           product_id: "qemu-guest-agent-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-kvm-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-kvm-2.11.2-5.29.1.i586",
                           product_id: "qemu-kvm-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-lang-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-lang-2.11.2-5.29.1.i586",
                           product_id: "qemu-lang-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-linux-user-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-linux-user-2.11.2-5.29.1.i586",
                           product_id: "qemu-linux-user-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-ppc-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-ppc-2.11.2-5.29.1.i586",
                           product_id: "qemu-ppc-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-s390-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-s390-2.11.2-5.29.1.i586",
                           product_id: "qemu-s390-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-tools-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-tools-2.11.2-5.29.1.i586",
                           product_id: "qemu-tools-2.11.2-5.29.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-x86-2.11.2-5.29.1.i586",
                        product: {
                           name: "qemu-x86-2.11.2-5.29.1.i586",
                           product_id: "qemu-x86-2.11.2-5.29.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-ipxe-1.0.0+-5.29.1.noarch",
                        product: {
                           name: "qemu-ipxe-1.0.0+-5.29.1.noarch",
                           product_id: "qemu-ipxe-1.0.0+-5.29.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                        product: {
                           name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                           product_id: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-sgabios-8-5.29.1.noarch",
                        product: {
                           name: "qemu-sgabios-8-5.29.1.noarch",
                           product_id: "qemu-sgabios-8-5.29.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                        product: {
                           name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                           product_id: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-arm-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-arm-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-arm-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-curl-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-block-curl-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-block-curl-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-dmg-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-block-dmg-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-block-dmg-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-rbd-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-block-rbd-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-block-rbd-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-extra-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-extra-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-extra-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-lang-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-lang-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-lang-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-linux-user-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-linux-user-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-linux-user-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-ppc-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-ppc-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-ppc-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-s390-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-s390-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-s390-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-tools-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-tools-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-tools-2.11.2-5.29.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-x86-2.11.2-5.29.1.ppc64le",
                        product: {
                           name: "qemu-x86-2.11.2-5.29.1.ppc64le",
                           product_id: "qemu-x86-2.11.2-5.29.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-2.11.2-5.29.1.s390x",
                           product_id: "qemu-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-arm-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-arm-2.11.2-5.29.1.s390x",
                           product_id: "qemu-arm-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-curl-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-block-curl-2.11.2-5.29.1.s390x",
                           product_id: "qemu-block-curl-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-dmg-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-block-dmg-2.11.2-5.29.1.s390x",
                           product_id: "qemu-block-dmg-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-iscsi-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-block-iscsi-2.11.2-5.29.1.s390x",
                           product_id: "qemu-block-iscsi-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-rbd-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-block-rbd-2.11.2-5.29.1.s390x",
                           product_id: "qemu-block-rbd-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-ssh-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-block-ssh-2.11.2-5.29.1.s390x",
                           product_id: "qemu-block-ssh-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-extra-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-extra-2.11.2-5.29.1.s390x",
                           product_id: "qemu-extra-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-guest-agent-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-guest-agent-2.11.2-5.29.1.s390x",
                           product_id: "qemu-guest-agent-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-kvm-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-kvm-2.11.2-5.29.1.s390x",
                           product_id: "qemu-kvm-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-lang-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-lang-2.11.2-5.29.1.s390x",
                           product_id: "qemu-lang-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-linux-user-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-linux-user-2.11.2-5.29.1.s390x",
                           product_id: "qemu-linux-user-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-ppc-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-ppc-2.11.2-5.29.1.s390x",
                           product_id: "qemu-ppc-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-s390-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-s390-2.11.2-5.29.1.s390x",
                           product_id: "qemu-s390-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-tools-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-tools-2.11.2-5.29.1.s390x",
                           product_id: "qemu-tools-2.11.2-5.29.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-x86-2.11.2-5.29.1.s390x",
                        product: {
                           name: "qemu-x86-2.11.2-5.29.1.s390x",
                           product_id: "qemu-x86-2.11.2-5.29.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "qemu-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-arm-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-arm-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-arm-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-curl-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-block-curl-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-block-curl-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-dmg-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-block-dmg-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-block-dmg-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-extra-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-extra-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-extra-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-kvm-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-kvm-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-kvm-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-lang-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-lang-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-lang-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-linux-user-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-linux-user-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-linux-user-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-ppc-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-ppc-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-ppc-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-s390-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-s390-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-s390-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-tools-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-tools-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-tools-2.11.2-5.29.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "qemu-x86-2.11.2-5.29.1.x86_64",
                        product: {
                           name: "qemu-x86-2.11.2-5.29.1.x86_64",
                           product_id: "qemu-x86-2.11.2-5.29.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 9",
                        product: {
                           name: "SUSE OpenStack Cloud 9",
                           product_id: "SUSE OpenStack Cloud 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 9",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 9",
                           product_id: "SUSE OpenStack Cloud Crowbar 9",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:9",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-rbd-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ipxe-1.0.0+-5.29.1.noarch as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
            },
            product_reference: "qemu-ipxe-1.0.0+-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-kvm-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-kvm-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-sgabios-8-5.29.1.noarch as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
            },
            product_reference: "qemu-sgabios-8-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-x86-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud 9",
               product_id: "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-x86-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-rbd-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ipxe-1.0.0+-5.29.1.noarch as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
            },
            product_reference: "qemu-ipxe-1.0.0+-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-kvm-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-kvm-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-sgabios-8-5.29.1.noarch as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
            },
            product_reference: "qemu-sgabios-8-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-x86-2.11.2-5.29.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9",
               product_id: "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-x86-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-rbd-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ipxe-1.0.0+-5.29.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
            },
            product_reference: "qemu-ipxe-1.0.0+-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-kvm-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-kvm-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ppc-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-ppc-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-sgabios-8-5.29.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
            },
            product_reference: "qemu-sgabios-8-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-x86-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-x86-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-arm-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-arm-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-curl-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-curl-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-iscsi-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-iscsi-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-rbd-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-block-rbd-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-rbd-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-rbd-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-block-ssh-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-block-ssh-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-guest-agent-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-guest-agent-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ipxe-1.0.0+-5.29.1.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
            },
            product_reference: "qemu-ipxe-1.0.0+-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-kvm-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-kvm-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-kvm-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-kvm-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-lang-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-lang-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-ppc-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-ppc-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-s390-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-s390-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-sgabios-8-5.29.1.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
            },
            product_reference: "qemu-sgabios-8-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-tools-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-tools-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            },
            product_reference: "qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "qemu-x86-2.11.2-5.29.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
            },
            product_reference: "qemu-x86-2.11.2-5.29.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-11947",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11947",
            },
         ],
         notes: [
            {
               category: "general",
               text: "iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11947",
               url: "https://www.suse.com/security/cve/CVE-2020-11947",
            },
            {
               category: "external",
               summary: "SUSE Bug 1180523 for CVE-2020-11947",
               url: "https://bugzilla.suse.com/1180523",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11947",
      },
      {
         cve: "CVE-2020-12829",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12829",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12829",
               url: "https://www.suse.com/security/cve/CVE-2020-12829",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172385 for CVE-2020-12829",
               url: "https://bugzilla.suse.com/1172385",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12829",
      },
      {
         cve: "CVE-2020-13361",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13361",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13361",
               url: "https://www.suse.com/security/cve/CVE-2020-13361",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172384 for CVE-2020-13361",
               url: "https://bugzilla.suse.com/1172384",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.9,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-13361",
      },
      {
         cve: "CVE-2020-13362",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13362",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13362",
               url: "https://www.suse.com/security/cve/CVE-2020-13362",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172383 for CVE-2020-13362",
               url: "https://bugzilla.suse.com/1172383",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.2,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-13362",
      },
      {
         cve: "CVE-2020-13659",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13659",
            },
         ],
         notes: [
            {
               category: "general",
               text: "address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13659",
               url: "https://www.suse.com/security/cve/CVE-2020-13659",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172386 for CVE-2020-13659",
               url: "https://bugzilla.suse.com/1172386",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13659",
      },
      {
         cve: "CVE-2020-13765",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13765",
            },
         ],
         notes: [
            {
               category: "general",
               text: "rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13765",
               url: "https://www.suse.com/security/cve/CVE-2020-13765",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172478 for CVE-2020-13765",
               url: "https://bugzilla.suse.com/1172478",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "important",
            },
         ],
         title: "CVE-2020-13765",
      },
      {
         cve: "CVE-2020-14364",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-14364",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-14364",
               url: "https://www.suse.com/security/cve/CVE-2020-14364",
            },
            {
               category: "external",
               summary: "SUSE Bug 1175441 for CVE-2020-14364",
               url: "https://bugzilla.suse.com/1175441",
            },
            {
               category: "external",
               summary: "SUSE Bug 1175534 for CVE-2020-14364",
               url: "https://bugzilla.suse.com/1175534",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176494 for CVE-2020-14364",
               url: "https://bugzilla.suse.com/1176494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1177130 for CVE-2020-14364",
               url: "https://bugzilla.suse.com/1177130",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-14364",
      },
      {
         cve: "CVE-2020-15469",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15469",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15469",
               url: "https://www.suse.com/security/cve/CVE-2020-15469",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173612 for CVE-2020-15469",
               url: "https://bugzilla.suse.com/1173612",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15469",
      },
      {
         cve: "CVE-2020-15863",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15863",
            },
         ],
         notes: [
            {
               category: "general",
               text: "hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15863",
               url: "https://www.suse.com/security/cve/CVE-2020-15863",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174386 for CVE-2020-15863",
               url: "https://bugzilla.suse.com/1174386",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "important",
            },
         ],
         title: "CVE-2020-15863",
      },
      {
         cve: "CVE-2020-16092",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-16092",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-16092",
               url: "https://www.suse.com/security/cve/CVE-2020-16092",
            },
            {
               category: "external",
               summary: "SUSE Bug 1174641 for CVE-2020-16092",
               url: "https://bugzilla.suse.com/1174641",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.8,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-16092",
      },
      {
         cve: "CVE-2020-25084",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25084",
            },
         ],
         notes: [
            {
               category: "general",
               text: "QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25084",
               url: "https://www.suse.com/security/cve/CVE-2020-25084",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176673 for CVE-2020-25084",
               url: "https://bugzilla.suse.com/1176673",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-25084",
      },
      {
         cve: "CVE-2020-25624",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25624",
            },
         ],
         notes: [
            {
               category: "general",
               text: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25624",
               url: "https://www.suse.com/security/cve/CVE-2020-25624",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176682 for CVE-2020-25624",
               url: "https://bugzilla.suse.com/1176682",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-25624",
      },
      {
         cve: "CVE-2020-25625",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25625",
            },
         ],
         notes: [
            {
               category: "general",
               text: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25625",
               url: "https://www.suse.com/security/cve/CVE-2020-25625",
            },
            {
               category: "external",
               summary: "SUSE Bug 1176684 for CVE-2020-25625",
               url: "https://bugzilla.suse.com/1176684",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.5,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-25625",
      },
      {
         cve: "CVE-2020-25723",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-25723",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-25723",
               url: "https://www.suse.com/security/cve/CVE-2020-25723",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178934 for CVE-2020-25723",
               url: "https://bugzilla.suse.com/1178934",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178935 for CVE-2020-25723",
               url: "https://bugzilla.suse.com/1178935",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.2,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-25723",
      },
      {
         cve: "CVE-2020-27617",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-27617",
            },
         ],
         notes: [
            {
               category: "general",
               text: "eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-27617",
               url: "https://www.suse.com/security/cve/CVE-2020-27617",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178174 for CVE-2020-27617",
               url: "https://bugzilla.suse.com/1178174",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-27617",
      },
      {
         cve: "CVE-2020-28916",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-28916",
            },
         ],
         notes: [
            {
               category: "general",
               text: "hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-28916",
               url: "https://www.suse.com/security/cve/CVE-2020-28916",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178683 for CVE-2020-28916",
               url: "https://bugzilla.suse.com/1178683",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179468 for CVE-2020-28916",
               url: "https://bugzilla.suse.com/1179468",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-28916",
      },
      {
         cve: "CVE-2020-29129",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-29129",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-29129",
               url: "https://www.suse.com/security/cve/CVE-2020-29129",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179466 for CVE-2020-29129",
               url: "https://bugzilla.suse.com/1179466",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179467 for CVE-2020-29129",
               url: "https://bugzilla.suse.com/1179467",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179477 for CVE-2020-29129",
               url: "https://bugzilla.suse.com/1179477",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179484 for CVE-2020-29129",
               url: "https://bugzilla.suse.com/1179484",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 2.7,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-29129",
      },
      {
         cve: "CVE-2020-29130",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-29130",
            },
         ],
         notes: [
            {
               category: "general",
               text: "slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-29130",
               url: "https://www.suse.com/security/cve/CVE-2020-29130",
            },
            {
               category: "external",
               summary: "SUSE Bug 1178658 for CVE-2020-29130",
               url: "https://bugzilla.suse.com/1178658",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179467 for CVE-2020-29130",
               url: "https://bugzilla.suse.com/1179467",
            },
            {
               category: "external",
               summary: "SUSE Bug 1179477 for CVE-2020-29130",
               url: "https://bugzilla.suse.com/1179477",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-29130",
      },
      {
         cve: "CVE-2020-29443",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-29443",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-29443",
               url: "https://www.suse.com/security/cve/CVE-2020-29443",
            },
            {
               category: "external",
               summary: "SUSE Bug 1181108 for CVE-2020-29443",
               url: "https://bugzilla.suse.com/1181108",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.9,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2020-29443",
      },
      {
         cve: "CVE-2021-20181",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-20181",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-20181",
               url: "https://www.suse.com/security/cve/CVE-2021-20181",
            },
            {
               category: "external",
               summary: "SUSE Bug 1182137 for CVE-2021-20181",
               url: "https://bugzilla.suse.com/1182137",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "important",
            },
         ],
         title: "CVE-2021-20181",
      },
      {
         cve: "CVE-2021-20203",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-20203",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-20203",
               url: "https://www.suse.com/security/cve/CVE-2021-20203",
            },
            {
               category: "external",
               summary: "SUSE Bug 1181639 for CVE-2021-20203",
               url: "https://bugzilla.suse.com/1181639",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.2,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2021-20203",
      },
      {
         cve: "CVE-2021-20221",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-20221",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-20221",
               url: "https://www.suse.com/security/cve/CVE-2021-20221",
            },
            {
               category: "external",
               summary: "SUSE Bug 1181933 for CVE-2021-20221",
               url: "https://bugzilla.suse.com/1181933",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-20221",
      },
      {
         cve: "CVE-2021-20257",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-20257",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-20257",
               url: "https://www.suse.com/security/cve/CVE-2021-20257",
            },
            {
               category: "external",
               summary: "SUSE Bug 1182577 for CVE-2021-20257",
               url: "https://bugzilla.suse.com/1182577",
            },
            {
               category: "external",
               summary: "SUSE Bug 1182846 for CVE-2021-20257",
               url: "https://bugzilla.suse.com/1182846",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.2,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2021-20257",
      },
      {
         cve: "CVE-2021-3416",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-3416",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
               "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-3416",
               url: "https://www.suse.com/security/cve/CVE-2021-3416",
            },
            {
               category: "external",
               summary: "SUSE Bug 1182968 for CVE-2021-3416",
               url: "https://bugzilla.suse.com/1182968",
            },
            {
               category: "external",
               summary: "SUSE Bug 1186473 for CVE-2021-3416",
               url: "https://bugzilla.suse.com/1186473",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.2,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1.noarch",
                  "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-04-16T11:59:57Z",
               details: "low",
            },
         ],
         title: "CVE-2021-3416",
      },
   ],
}

cve-2020-12829

Vulnerability from cvelistv5

Published

2020-08-31 14:41

Modified

2024-08-04 12:04

Severity ?

Summary

In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.

References

▼	URL	Tags
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1808510	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4760	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:04:22.879Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1808510",
               },
               {
                  name: "DSA-4760",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4760",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-09-07T11:06:06",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1808510",
            },
            {
               name: "DSA-4760",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4760",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-12829",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1808510",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1808510",
                  },
                  {
                     name: "DSA-4760",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4760",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-12829",
      datePublished: "2020-08-31T14:41:14",
      dateReserved: "2020-05-13T00:00:00",
      dateUpdated: "2024-08-04T12:04:22.879Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-14364

Vulnerability from cvelistv5

Published

2020-08-31 17:11

Modified

2024-08-04 12:46

Severity ?

Summary

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1869201	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/08/24/3	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/08/24/2	x_refsource_MISC
	https://www.debian.org/security/2020/dsa-4760	vendor-advisory, x_refsource_DEBIAN
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTZQUQ6ZBPMFMNAUQBVJFELYNMUZLL6P/	vendor-advisory, x_refsource_FEDORA
	https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4511-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.netapp.com/advisory/ntap-20200924-0006/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202009-14	vendor-advisory, x_refsource_GENTOO
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202011-09	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	QEMU	Version: QEMU versions before 5.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:46:34.192Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869201",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/08/24/3",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/08/24/2",
               },
               {
                  name: "DSA-4760",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4760",
               },
               {
                  name: "FEDORA-2020-3689b67b53",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTZQUQ6ZBPMFMNAUQBVJFELYNMUZLL6P/",
               },
               {
                  name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
               },
               {
                  name: "FEDORA-2020-eeb29955ed",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/",
               },
               {
                  name: "USN-4511-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4511-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200924-0006/",
               },
               {
                  name: "GLSA-202009-14",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202009-14",
               },
               {
                  name: "openSUSE-SU-2020:1664",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
               },
               {
                  name: "GLSA-202011-09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202011-09",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "QEMU",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "QEMU versions before 5.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125 leads to CWE-787",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-11T05:06:21",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869201",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/08/24/3",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/08/24/2",
            },
            {
               name: "DSA-4760",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4760",
            },
            {
               name: "FEDORA-2020-3689b67b53",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTZQUQ6ZBPMFMNAUQBVJFELYNMUZLL6P/",
            },
            {
               name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
            },
            {
               name: "FEDORA-2020-eeb29955ed",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/",
            },
            {
               name: "USN-4511-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4511-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200924-0006/",
            },
            {
               name: "GLSA-202009-14",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202009-14",
            },
            {
               name: "openSUSE-SU-2020:1664",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
            },
            {
               name: "GLSA-202011-09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202011-09",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-14364",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "QEMU",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "QEMU versions before 5.2.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-125 leads to CWE-787",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1869201",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1869201",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/08/24/3",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/08/24/3",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/08/24/2",
                     refsource: "MISC",
                     url: "https://www.openwall.com/lists/oss-security/2020/08/24/2",
                  },
                  {
                     name: "DSA-4760",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4760",
                  },
                  {
                     name: "FEDORA-2020-3689b67b53",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTZQUQ6ZBPMFMNAUQBVJFELYNMUZLL6P/",
                  },
                  {
                     name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
                  },
                  {
                     name: "FEDORA-2020-eeb29955ed",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M52WIRMZL6TZRYZ65N6OAYNNFHV62O2N/",
                  },
                  {
                     name: "USN-4511-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4511-1/",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200924-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200924-0006/",
                  },
                  {
                     name: "GLSA-202009-14",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202009-14",
                  },
                  {
                     name: "openSUSE-SU-2020:1664",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
                  },
                  {
                     name: "GLSA-202011-09",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202011-09",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-14364",
      datePublished: "2020-08-31T17:11:52",
      dateReserved: "2020-06-17T00:00:00",
      dateUpdated: "2024-08-04T12:46:34.192Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-29443

Vulnerability from cvelistv5

Published

2021-01-22 07:05

Modified

2024-08-04 16:55

Severity ?

Summary

ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2021/01/18/2	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20210304-0003/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:55:09.673Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/01/18/2",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210304-0003/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:35",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/01/18/2",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210304-0003/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-29443",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2021/01/18/2",
                     refsource: "MISC",
                     url: "http://www.openwall.com/lists/oss-security/2021/01/18/2",
                  },
                  {
                     name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20210304-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20210304-0003/",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-29443",
      datePublished: "2021-01-22T07:05:46",
      dateReserved: "2020-12-01T00:00:00",
      dateUpdated: "2024-08-04T16:55:09.673Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-16092

Vulnerability from cvelistv5

Published

2020-08-11 15:55

Modified

2024-08-04 13:37

Severity ?

Summary

In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/08/10/1	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200821-0006/	x_refsource_CONFIRM
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2020/dsa-4760	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:37:53.323Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/08/10/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200821-0006/",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  name: "DSA-4760",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4760",
               },
               {
                  name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
               },
               {
                  name: "openSUSE-SU-2020:1664",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
               },
               {
                  name: "GLSA-202208-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202208-27",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-08-14T18:13:30",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/08/10/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200821-0006/",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               name: "DSA-4760",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4760",
            },
            {
               name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
            },
            {
               name: "openSUSE-SU-2020:1664",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
            },
            {
               name: "GLSA-202208-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202208-27",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-16092",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/08/10/1",
                     refsource: "MISC",
                     url: "http://www.openwall.com/lists/oss-security/2020/08/10/1",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200821-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200821-0006/",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "DSA-4760",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4760",
                  },
                  {
                     name: "[debian-lts-announce] 20200913 [SECURITY] [DLA 2373-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html",
                  },
                  {
                     name: "openSUSE-SU-2020:1664",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
                  },
                  {
                     name: "GLSA-202208-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202208-27",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-16092",
      datePublished: "2020-08-11T15:55:29",
      dateReserved: "2020-07-28T00:00:00",
      dateUpdated: "2024-08-04T13:37:53.323Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13659

Vulnerability from cvelistv5

Published

2020-06-02 12:50

Modified

2024-08-04 12:25

Severity ?

Summary

address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.

References

▼	URL	Tags
	https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/06/01/3	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20200608-0007/	x_refsource_CONFIRM
	https://www.debian.org/security/2020/dsa-4728	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202011-09	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:25:16.410Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/06/01/3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0007/",
               },
               {
                  name: "DSA-4728",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4728",
               },
               {
                  name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
               },
               {
                  name: "openSUSE-SU-2020:1108",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  name: "GLSA-202011-09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202011-09",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-11T05:06:18",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/06/01/3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0007/",
            },
            {
               name: "DSA-4728",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4728",
            },
            {
               name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
            },
            {
               name: "openSUSE-SU-2020:1108",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               name: "GLSA-202011-09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202011-09",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13659",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/06/01/3",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/06/01/3",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0007/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0007/",
                  },
                  {
                     name: "DSA-4728",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4728",
                  },
                  {
                     name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
                  },
                  {
                     name: "openSUSE-SU-2020:1108",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "GLSA-202011-09",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202011-09",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13659",
      datePublished: "2020-06-02T12:50:44",
      dateReserved: "2020-05-28T00:00:00",
      dateUpdated: "2024-08-04T12:25:16.410Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13362

Vulnerability from cvelistv5

Published

2020-05-28 14:35

Modified

2024-08-04 12:18

Severity ?

Summary

In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.

References

▼	URL	Tags
	https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html	x_refsource_MISC
	https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/05/28/2	x_refsource_CONFIRM
	https://security-tracker.debian.org/tracker/CVE-2020-13362	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200608-0003/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2020/dsa-4728	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202011-09	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:18:18.087Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/05/28/2",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://security-tracker.debian.org/tracker/CVE-2020-13362",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
               },
               {
                  name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
               },
               {
                  name: "DSA-4728",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4728",
               },
               {
                  name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
               },
               {
                  name: "openSUSE-SU-2020:1108",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  name: "GLSA-202011-09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202011-09",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2020-05-28T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-11T05:06:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/05/28/2",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://security-tracker.debian.org/tracker/CVE-2020-13362",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
            },
            {
               name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
            },
            {
               name: "DSA-4728",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4728",
            },
            {
               name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
            },
            {
               name: "openSUSE-SU-2020:1108",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               name: "GLSA-202011-09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202011-09",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13362",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html",
                  },
                  {
                     name: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/05/28/2",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/05/28/2",
                  },
                  {
                     name: "https://security-tracker.debian.org/tracker/CVE-2020-13362",
                     refsource: "MISC",
                     url: "https://security-tracker.debian.org/tracker/CVE-2020-13362",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
                  },
                  {
                     name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
                  },
                  {
                     name: "DSA-4728",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4728",
                  },
                  {
                     name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
                  },
                  {
                     name: "openSUSE-SU-2020:1108",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "GLSA-202011-09",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202011-09",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13362",
      datePublished: "2020-05-28T14:35:24",
      dateReserved: "2020-05-21T00:00:00",
      dateUpdated: "2024-08-04T12:18:18.087Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13361

Vulnerability from cvelistv5

Published

2020-05-28 13:42

Modified

2024-08-04 12:18

Severity ?

Summary

In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.

References

▼	URL	Tags
	https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/05/28/1	x_refsource_CONFIRM
	https://security-tracker.debian.org/tracker/CVE-2020-13361	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200608-0003/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2020/dsa-4728	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202011-09	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:18:17.617Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/05/28/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://security-tracker.debian.org/tracker/CVE-2020-13361",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
               },
               {
                  name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
               },
               {
                  name: "DSA-4728",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4728",
               },
               {
                  name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
               },
               {
                  name: "openSUSE-SU-2020:1108",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  name: "GLSA-202011-09",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202011-09",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2020-05-28T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-11-11T05:06:17",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/05/28/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://security-tracker.debian.org/tracker/CVE-2020-13361",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
            },
            {
               name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
            },
            {
               name: "DSA-4728",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4728",
            },
            {
               name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
            },
            {
               name: "openSUSE-SU-2020:1108",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               name: "GLSA-202011-09",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202011-09",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13361",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/05/28/1",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/05/28/1",
                  },
                  {
                     name: "https://security-tracker.debian.org/tracker/CVE-2020-13361",
                     refsource: "MISC",
                     url: "https://security-tracker.debian.org/tracker/CVE-2020-13361",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0003/",
                  },
                  {
                     name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
                  },
                  {
                     name: "DSA-4728",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4728",
                  },
                  {
                     name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
                  },
                  {
                     name: "openSUSE-SU-2020:1108",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "GLSA-202011-09",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202011-09",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13361",
      datePublished: "2020-05-28T13:42:06",
      dateReserved: "2020-05-21T00:00:00",
      dateUpdated: "2024-08-04T12:18:17.617Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-25723

Vulnerability from cvelistv5

Published

2020-12-02 00:52

Modified

2024-08-04 15:40

Severity ?

Summary

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1898579	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20201218-0004/	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2020/12/22/1	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	QEMU	Version: qemu 5.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:36.594Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1898579",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201218-0004/",
               },
               {
                  name: "[oss-security] 20201222 CVE-2020-25723 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/12/22/1",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "QEMU",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "qemu 5.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-617",
                     description: "CWE-617",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:34",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1898579",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201218-0004/",
            },
            {
               name: "[oss-security] 20201222 CVE-2020-25723 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/12/22/1",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-25723",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "QEMU",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "qemu 5.2.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-617",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1898579",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1898579",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201218-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201218-0004/",
                  },
                  {
                     name: "[oss-security] 20201222 CVE-2020-25723 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/12/22/1",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-25723",
      datePublished: "2020-12-02T00:52:10",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:36.594Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-3416

Vulnerability from cvelistv5

Published

2021-03-18 19:53

Modified

2024-08-03 16:53

Severity ?

Summary

A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1932827	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2021/02/26/1	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20210507-0002/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	QEMU	Version: versions up to and including 5.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T16:53:17.483Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1932827",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2021/02/26/1",
               },
               {
                  name: "[debian-lts-announce] 20210410 [SECURITY] [DLA 2623-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210507-0002/",
               },
               {
                  name: "GLSA-202208-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202208-27",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "QEMU",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "versions up to and including 5.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-835",
                     description: "CWE-835",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:21",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1932827",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2021/02/26/1",
            },
            {
               name: "[debian-lts-announce] 20210410 [SECURITY] [DLA 2623-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210507-0002/",
            },
            {
               name: "GLSA-202208-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202208-27",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-3416",
      datePublished: "2021-03-18T19:53:29",
      dateReserved: "2021-02-25T00:00:00",
      dateUpdated: "2024-08-03T16:53:17.483Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-29129

Vulnerability from cvelistv5

Published

2020-11-26 19:03

Modified

2024-08-04 16:48

Severity ?

Summary

ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

References

▼	URL	Tags
	https://lists.freedesktop.org/archives/slirp/2020-November/000115.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/11/27/1	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/	vendor-advisory, x_refsource_FEDORA
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:48:01.536Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
               },
               {
                  name: "[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/27/1",
               },
               {
                  name: "FEDORA-2020-77f93f41be",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/",
               },
               {
                  name: "FEDORA-2020-331e1318dd",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:22",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
            },
            {
               name: "[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/27/1",
            },
            {
               name: "FEDORA-2020-77f93f41be",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/",
            },
            {
               name: "FEDORA-2020-331e1318dd",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-29129",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
                     refsource: "MISC",
                     url: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
                  },
                  {
                     name: "[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/27/1",
                  },
                  {
                     name: "FEDORA-2020-77f93f41be",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/",
                  },
                  {
                     name: "FEDORA-2020-331e1318dd",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-29129",
      datePublished: "2020-11-26T19:03:55",
      dateReserved: "2020-11-26T00:00:00",
      dateUpdated: "2024-08-04T16:48:01.536Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-15469

Vulnerability from cvelistv5

Published

2020-07-02 19:25

Modified

2024-08-04 13:15

Severity ?

Summary

In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.

References

▼	URL	Tags
	https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/07/02/1	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:15:20.710Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/07/02/1",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/07/02/1",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-15469",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html",
                     refsource: "MISC",
                     url: "https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/07/02/1",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/07/02/1",
                  },
                  {
                     name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-15469",
      datePublished: "2020-07-02T19:25:42",
      dateReserved: "2020-07-01T00:00:00",
      dateUpdated: "2024-08-04T13:15:20.710Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-25624

Vulnerability from cvelistv5

Published

2020-11-30 06:28

Modified

2024-08-04 15:40

Severity ?

Summary

hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20201210-0005/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:35.411Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201210-0005/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:14",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201210-0005/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-25624",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201210-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201210-0005/",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-25624",
      datePublished: "2020-11-30T06:28:17",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:35.411Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-15863

Vulnerability from cvelistv5

Published

2020-07-28 15:40

Modified

2024-08-04 13:30

Severity ?

Summary

hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/07/22/1	x_refsource_CONFIRM
	https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=5519724a13664b43e225ca05351c60b4468e4555	x_refsource_CONFIRM
	https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html	x_refsource_MISC
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.debian.org/security/2020/dsa-4760	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:30:22.902Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/07/22/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=5519724a13664b43e225ca05351c60b4468e4555",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  name: "DSA-4760",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4760",
               },
               {
                  name: "openSUSE-SU-2020:1664",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
               },
               {
                  name: "GLSA-202208-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202208-27",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-08-14T19:06:51",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/07/22/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=5519724a13664b43e225ca05351c60b4468e4555",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               name: "DSA-4760",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4760",
            },
            {
               name: "openSUSE-SU-2020:1664",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
            },
            {
               name: "GLSA-202208-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202208-27",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-15863",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/07/22/1",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/07/22/1",
                  },
                  {
                     name: "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=5519724a13664b43e225ca05351c60b4468e4555",
                     refsource: "CONFIRM",
                     url: "https://git.qemu.org/?p=qemu.git;a=commitdiff;h=5519724a13664b43e225ca05351c60b4468e4555",
                  },
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "DSA-4760",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4760",
                  },
                  {
                     name: "openSUSE-SU-2020:1664",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html",
                  },
                  {
                     name: "GLSA-202208-27",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202208-27",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-15863",
      datePublished: "2020-07-28T15:40:29",
      dateReserved: "2020-07-21T00:00:00",
      dateUpdated: "2024-08-04T13:30:22.902Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13765

Vulnerability from cvelistv5

Published

2020-06-04 15:26

Modified

2024-08-04 12:25

Severity ?

Summary

rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.

References

▼	URL	Tags
	https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319	x_refsource_MISC
	https://www.openwall.com/lists/oss-security/2020/06/03/6	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20200619-0006/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/4467-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:25:16.492Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2020/06/03/6",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200619-0006/",
               },
               {
                  name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
               },
               {
                  name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
               },
               {
                  name: "USN-4467-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4467-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-01-04T19:58:03",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=e423455c4f23a1a828901c78fe6d03b7dde79319",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.openwall.com/lists/oss-security/2020/06/03/6",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200619-0006/",
            },
            {
               name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
            },
            {
               name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
            },
            {
               name: "USN-4467-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4467-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13765",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319",
                     refsource: "MISC",
                     url: "https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319",
                  },
                  {
                     name: "https://www.openwall.com/lists/oss-security/2020/06/03/6",
                     refsource: "CONFIRM",
                     url: "https://www.openwall.com/lists/oss-security/2020/06/03/6",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200619-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200619-0006/",
                  },
                  {
                     name: "[debian-lts-announce] 20200629 [SECURITY] [DLA 2262-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html",
                  },
                  {
                     name: "[debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html",
                  },
                  {
                     name: "USN-4467-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4467-1/",
                  },
                  {
                     name: "https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676",
                     refsource: "MISC",
                     url: "https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13765",
      datePublished: "2020-06-04T15:26:17",
      dateReserved: "2020-06-02T00:00:00",
      dateUpdated: "2024-08-04T12:25:16.492Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-25625

Vulnerability from cvelistv5

Published

2020-09-25 04:12

Modified

2024-08-04 15:40

Severity ?

Summary

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/09/17/1	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20201009-0005/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:40:35.441Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/09/17/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
               },
               {
                  name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:38",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/09/17/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
            },
            {
               name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-25625",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/09/17/1",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/09/17/1",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201009-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
                  },
                  {
                     name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-25625",
      datePublished: "2020-09-25T04:12:07",
      dateReserved: "2020-09-16T00:00:00",
      dateUpdated: "2024-08-04T15:40:35.441Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-11947

Vulnerability from cvelistv5

Published

2020-12-31 00:13

Modified

2024-08-04 11:42

Severity ?

Summary

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.

References

▼	URL	Tags
	https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2021/01/13/4	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20210212-0001/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T11:42:00.543Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5",
               },
               {
                  name: "[oss-security] 20210113 CVE-2020-11947 QEMU: heap buffer overflow in iSCSI block driver may lead to information disclosure",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/01/13/4",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210212-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-02-12T10:06:20",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5",
            },
            {
               name: "[oss-security] 20210113 CVE-2020-11947 QEMU: heap buffer overflow in iSCSI block driver may lead to information disclosure",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/01/13/4",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210212-0001/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-11947",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://git.qemu.org/?p=qemu.git;a=commit;h=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5",
                     refsource: "MISC",
                     url: "https://git.qemu.org/?p=qemu.git;a=commit;h=ff0507c239a246fd7215b31c5658fc6a3ee1e4c5",
                  },
                  {
                     name: "[oss-security] 20210113 CVE-2020-11947 QEMU: heap buffer overflow in iSCSI block driver may lead to information disclosure",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2021/01/13/4",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20210212-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20210212-0001/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-11947",
      datePublished: "2020-12-31T00:13:30",
      dateReserved: "2020-04-20T00:00:00",
      dateUpdated: "2024-08-04T11:42:00.543Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-20203

Vulnerability from cvelistv5

Published

2021-02-25 19:09

Modified

2024-08-03 17:30

Severity ?

Summary

An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1922441	x_refsource_MISC
	https://bugs.launchpad.net/qemu/+bug/1913873	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	qemu	Version: versions up to v5.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:30:07.577Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1922441",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.launchpad.net/qemu/+bug/1913873",
               },
               {
                  name: "[debian-lts-announce] 20210410 [SECURITY] [DLA 2623-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
               },
               {
                  name: "GLSA-202208-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202208-27",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "qemu",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "versions up to v5.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:42",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1922441",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.launchpad.net/qemu/+bug/1913873",
            },
            {
               name: "[debian-lts-announce] 20210410 [SECURITY] [DLA 2623-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
            },
            {
               name: "GLSA-202208-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202208-27",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-20203",
      datePublished: "2021-02-25T19:09:46",
      dateReserved: "2020-12-17T00:00:00",
      dateUpdated: "2024-08-03T17:30:07.577Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-20181

Vulnerability from cvelistv5

Published

2021-05-13 15:24

Modified

2024-08-03 17:30

Severity ?

Summary

A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.

References

▼	URL	Tags
	https://www.zerodayinitiative.com/advisories/ZDI-21-159/	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1927007	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20210720-0009/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	qemu	Version: up to, including 5.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:30:07.767Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.zerodayinitiative.com/advisories/ZDI-21-159/",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1927007",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210720-0009/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "qemu",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "up to, including 5.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-367",
                     description: "CWE-367->CWE-416",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:09",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.zerodayinitiative.com/advisories/ZDI-21-159/",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1927007",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210720-0009/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-20181",
      datePublished: "2021-05-13T15:24:15",
      dateReserved: "2020-12-17T00:00:00",
      dateUpdated: "2024-08-03T17:30:07.767Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-28916

Vulnerability from cvelistv5

Published

2020-12-04 06:22

Modified

2024-08-04 16:41

Severity ?

Summary

hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/12/01/2	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:41:00.136Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/12/01/2",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:47",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/12/01/2",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-28916",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/12/01/2",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/12/01/2",
                  },
                  {
                     name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-28916",
      datePublished: "2020-12-04T06:22:37",
      dateReserved: "2020-11-18T00:00:00",
      dateUpdated: "2024-08-04T16:41:00.136Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27617

Vulnerability from cvelistv5

Published

2020-11-06 07:51

Modified

2024-08-04 16:18

Severity ?

Summary

eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/11/02/1	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20201202-0002/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:18:44.828Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/02/1",
               },
               {
                  name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201202-0002/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:10",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/02/1",
            },
            {
               name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201202-0002/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-27617",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg05731.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/11/02/1",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/11/02/1",
                  },
                  {
                     name: "[debian-lts-announce] 20201129 [SECURITY] [DLA 2469-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/11/msg00047.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201202-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201202-0002/",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-27617",
      datePublished: "2020-11-06T07:51:37",
      dateReserved: "2020-10-22T00:00:00",
      dateUpdated: "2024-08-04T16:18:44.828Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-25084

Vulnerability from cvelistv5

Published

2020-09-25 04:06

Modified

2024-08-04 15:26

Severity ?

Summary

QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.

References

▼	URL	Tags
	https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2020/09/16/5	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20201009-0005/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T15:26:09.638Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/09/16/5",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:23",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/09/16/5",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-25084",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html",
                     refsource: "MISC",
                     url: "https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html",
                  },
                  {
                     name: "http://www.openwall.com/lists/oss-security/2020/09/16/5",
                     refsource: "CONFIRM",
                     url: "http://www.openwall.com/lists/oss-security/2020/09/16/5",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20201009-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20201009-0005/",
                  },
                  {
                     name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-25084",
      datePublished: "2020-09-25T04:06:51",
      dateReserved: "2020-09-02T00:00:00",
      dateUpdated: "2024-08-04T15:26:09.638Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-20257

Vulnerability from cvelistv5

Published

2022-03-16 14:12

Modified

2024-08-03 17:37

Severity ?

Summary

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

References

▼	URL	Tags
	https://www.openwall.com/lists/oss-security/2021/02/25/2	x_refsource_MISC
	https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html	x_refsource_MISC
	https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1930087	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220425-0003/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	QEMU	Version: Fixed-In v6.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:37:23.120Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.openwall.com/lists/oss-security/2021/02/25/2",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1930087",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220425-0003/",
               },
               {
                  name: "GLSA-202208-27",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202208-27",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "QEMU",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Fixed-In v6.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-835",
                     description: "CWE-835",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:44",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.openwall.com/lists/oss-security/2021/02/25/2",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1930087",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220425-0003/",
            },
            {
               name: "GLSA-202208-27",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202208-27",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-20257",
      datePublished: "2022-03-16T14:12:26",
      dateReserved: "2020-12-17T00:00:00",
      dateUpdated: "2024-08-03T17:37:23.120Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-20221

Vulnerability from cvelistv5

Published

2021-05-13 15:34

Modified

2024-08-03 17:30

Severity ?

Summary

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.

References

▼	URL	Tags
	http://www.openwall.com/lists/oss-security/2021/02/05/1	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1924601	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20210708-0005/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	qemu	Version: up to, including qemu 4.2.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:30:07.645Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[oss-security] 20210205 CVE-2021-20221 QEMU: aarch64: GIC: out-of-bound heap buffer access via an interrupt ID field",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/02/05/1",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1924601",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20210708-0005/",
               },
               {
                  name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "qemu",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "up to, including qemu 4.2.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125->CWE-787",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-05T05:06:40",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "[oss-security] 20210205 CVE-2021-20221 QEMU: aarch64: GIC: out-of-bound heap buffer access via an interrupt ID field",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/02/05/1",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1924601",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20210708-0005/",
            },
            {
               name: "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-20221",
      datePublished: "2021-05-13T15:34:48",
      dateReserved: "2020-12-17T00:00:00",
      dateUpdated: "2024-08-03T17:30:07.645Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-29130

Vulnerability from cvelistv5

Published

2020-11-26 00:00

Modified

2024-08-04 16:48

Severity ?

Summary

slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.

References

▼	URL	Tags
	https://lists.freedesktop.org/archives/slirp/2020-November/000115.html
	http://www.openwall.com/lists/oss-security/2020/11/27/1	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:48:01.400Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
               },
               {
                  name: "[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2020/11/27/1",
               },
               {
                  name: "FEDORA-2020-77f93f41be",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/",
               },
               {
                  name: "FEDORA-2020-331e1318dd",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/",
               },
               {
                  name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
               },
               {
                  name: "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-03-14T00:00:00",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://lists.freedesktop.org/archives/slirp/2020-November/000115.html",
            },
            {
               name: "[oss-security] 20201127 CVE-2020-29129 CVE-2020-29130 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2020/11/27/1",
            },
            {
               name: "FEDORA-2020-77f93f41be",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/",
            },
            {
               name: "FEDORA-2020-331e1318dd",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/",
            },
            {
               name: "[debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html",
            },
            {
               name: "[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-29130",
      datePublished: "2020-11-26T00:00:00",
      dateReserved: "2020-11-26T00:00:00",
      dateUpdated: "2024-08-04T16:48:01.400Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature