suse-su-2021:3635-1
Vulnerability from csaf_suse
Published
2021-11-09 09:52
Modified
2021-11-09 09:52
Summary
Security update for qemu
Notes
Title of the patch
Security update for qemu
Description of the patch
This update for qemu fixes the following issues:
Security issues fixed:
- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)
- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)
- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)
- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)
- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)
- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)
- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)
Patchnames
SUSE-2021-3635,SUSE-OpenStack-Cloud-9-2021-3635,SUSE-OpenStack-Cloud-Crowbar-9-2021-3635,SUSE-SLE-SAP-12-SP4-2021-3635,SUSE-SLE-SERVER-12-SP4-LTSS-2021-3635
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for qemu", "title": "Title of the patch" }, { "category": "description", "text": "This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938, CVE-2021-3748)\n- Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702, CVE-2021-3713)\n- usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682)\n- NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506)\n- NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503)\n- eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255)\n- usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2021-3635,SUSE-OpenStack-Cloud-9-2021-3635,SUSE-OpenStack-Cloud-Crowbar-9-2021-3635,SUSE-SLE-SAP-12-SP4-2021-3635,SUSE-SLE-SERVER-12-SP4-LTSS-2021-3635", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_3635-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2021:3635-1", "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20213635-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2021:3635-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-November/009705.html" }, { "category": "self", "summary": "SUSE Bug 1180432", "url": "https://bugzilla.suse.com/1180432" }, { "category": "self", "summary": "SUSE Bug 1180433", "url": "https://bugzilla.suse.com/1180433" }, { "category": "self", "summary": "SUSE Bug 1180434", "url": "https://bugzilla.suse.com/1180434" }, { "category": "self", "summary": "SUSE Bug 1180435", "url": "https://bugzilla.suse.com/1180435" }, { "category": "self", "summary": "SUSE Bug 1182651", "url": "https://bugzilla.suse.com/1182651" }, { "category": "self", "summary": "SUSE Bug 1186012", "url": "https://bugzilla.suse.com/1186012" }, { "category": "self", "summary": "SUSE Bug 1189145", "url": "https://bugzilla.suse.com/1189145" }, { "category": "self", "summary": "SUSE Bug 1189702", "url": "https://bugzilla.suse.com/1189702" }, { "category": "self", "summary": "SUSE Bug 1189938", "url": "https://bugzilla.suse.com/1189938" }, { "category": "self", "summary": "SUSE CVE CVE-2020-35503 page", "url": "https://www.suse.com/security/cve/CVE-2020-35503/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-35504 page", "url": "https://www.suse.com/security/cve/CVE-2020-35504/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-35505 page", "url": "https://www.suse.com/security/cve/CVE-2020-35505/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-35506 page", "url": "https://www.suse.com/security/cve/CVE-2020-35506/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-20255 page", "url": "https://www.suse.com/security/cve/CVE-2021-20255/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3527 page", "url": "https://www.suse.com/security/cve/CVE-2021-3527/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3682 page", "url": "https://www.suse.com/security/cve/CVE-2021-3682/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3713 page", "url": "https://www.suse.com/security/cve/CVE-2021-3713/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3748 page", "url": "https://www.suse.com/security/cve/CVE-2021-3748/" } ], "title": "Security update for qemu", "tracking": { "current_release_date": "2021-11-09T09:52:13Z", "generator": { "date": "2021-11-09T09:52:13Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2021:3635-1", "initial_release_date": "2021-11-09T09:52:13Z", "revision_history": [ { "date": "2021-11-09T09:52:13Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "qemu-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-2.11.2-5.40.2.aarch64", "product_id": "qemu-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-arm-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-arm-2.11.2-5.40.2.aarch64", "product_id": "qemu-arm-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-block-curl-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-block-curl-2.11.2-5.40.2.aarch64", "product_id": "qemu-block-curl-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-block-dmg-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-block-dmg-2.11.2-5.40.2.aarch64", "product_id": "qemu-block-dmg-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-block-iscsi-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-block-iscsi-2.11.2-5.40.2.aarch64", "product_id": "qemu-block-iscsi-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-block-rbd-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-block-rbd-2.11.2-5.40.2.aarch64", "product_id": "qemu-block-rbd-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-block-ssh-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-block-ssh-2.11.2-5.40.2.aarch64", "product_id": "qemu-block-ssh-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-extra-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-extra-2.11.2-5.40.2.aarch64", "product_id": "qemu-extra-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-guest-agent-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-guest-agent-2.11.2-5.40.2.aarch64", "product_id": "qemu-guest-agent-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-lang-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-lang-2.11.2-5.40.2.aarch64", "product_id": "qemu-lang-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-linux-user-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-linux-user-2.11.2-5.40.2.aarch64", "product_id": "qemu-linux-user-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-ppc-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-ppc-2.11.2-5.40.2.aarch64", "product_id": "qemu-ppc-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-s390-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-s390-2.11.2-5.40.2.aarch64", "product_id": "qemu-s390-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-tools-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-tools-2.11.2-5.40.2.aarch64", "product_id": "qemu-tools-2.11.2-5.40.2.aarch64" } }, { "category": "product_version", "name": "qemu-x86-2.11.2-5.40.2.aarch64", "product": { "name": "qemu-x86-2.11.2-5.40.2.aarch64", "product_id": "qemu-x86-2.11.2-5.40.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "qemu-2.11.2-5.40.2.i586", "product": { "name": "qemu-2.11.2-5.40.2.i586", "product_id": "qemu-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-arm-2.11.2-5.40.2.i586", "product": { "name": "qemu-arm-2.11.2-5.40.2.i586", "product_id": "qemu-arm-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-block-curl-2.11.2-5.40.2.i586", "product": { "name": "qemu-block-curl-2.11.2-5.40.2.i586", "product_id": "qemu-block-curl-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-block-dmg-2.11.2-5.40.2.i586", "product": { "name": "qemu-block-dmg-2.11.2-5.40.2.i586", "product_id": "qemu-block-dmg-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-block-iscsi-2.11.2-5.40.2.i586", "product": { "name": "qemu-block-iscsi-2.11.2-5.40.2.i586", "product_id": "qemu-block-iscsi-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-block-ssh-2.11.2-5.40.2.i586", "product": { "name": "qemu-block-ssh-2.11.2-5.40.2.i586", "product_id": "qemu-block-ssh-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-extra-2.11.2-5.40.2.i586", "product": { "name": "qemu-extra-2.11.2-5.40.2.i586", "product_id": "qemu-extra-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-guest-agent-2.11.2-5.40.2.i586", "product": { "name": "qemu-guest-agent-2.11.2-5.40.2.i586", "product_id": "qemu-guest-agent-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-kvm-2.11.2-5.40.2.i586", "product": { "name": "qemu-kvm-2.11.2-5.40.2.i586", "product_id": "qemu-kvm-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-lang-2.11.2-5.40.2.i586", "product": { "name": "qemu-lang-2.11.2-5.40.2.i586", "product_id": "qemu-lang-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-linux-user-2.11.2-5.40.2.i586", "product": { "name": "qemu-linux-user-2.11.2-5.40.2.i586", "product_id": "qemu-linux-user-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-ppc-2.11.2-5.40.2.i586", "product": { "name": "qemu-ppc-2.11.2-5.40.2.i586", "product_id": "qemu-ppc-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-s390-2.11.2-5.40.2.i586", "product": { "name": "qemu-s390-2.11.2-5.40.2.i586", "product_id": "qemu-s390-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-tools-2.11.2-5.40.2.i586", "product": { "name": "qemu-tools-2.11.2-5.40.2.i586", "product_id": "qemu-tools-2.11.2-5.40.2.i586" } }, { "category": "product_version", "name": "qemu-x86-2.11.2-5.40.2.i586", "product": { "name": "qemu-x86-2.11.2-5.40.2.i586", "product_id": "qemu-x86-2.11.2-5.40.2.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "qemu-ipxe-1.0.0+-5.40.2.noarch", "product": { "name": "qemu-ipxe-1.0.0+-5.40.2.noarch", "product_id": "qemu-ipxe-1.0.0+-5.40.2.noarch" } }, { "category": "product_version", "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "product": { "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "product_id": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch" } }, { "category": "product_version", "name": "qemu-sgabios-8-5.40.2.noarch", "product": { "name": "qemu-sgabios-8-5.40.2.noarch", "product_id": "qemu-sgabios-8-5.40.2.noarch" } }, { "category": "product_version", "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "product": { "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "product_id": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "qemu-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-2.11.2-5.40.2.ppc64le", "product_id": "qemu-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-arm-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-arm-2.11.2-5.40.2.ppc64le", "product_id": "qemu-arm-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-block-curl-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-block-curl-2.11.2-5.40.2.ppc64le", "product_id": "qemu-block-curl-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-block-dmg-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-block-dmg-2.11.2-5.40.2.ppc64le", "product_id": "qemu-block-dmg-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "product_id": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-block-rbd-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-block-rbd-2.11.2-5.40.2.ppc64le", "product_id": "qemu-block-rbd-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-block-ssh-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-block-ssh-2.11.2-5.40.2.ppc64le", "product_id": "qemu-block-ssh-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-extra-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-extra-2.11.2-5.40.2.ppc64le", "product_id": "qemu-extra-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-guest-agent-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-guest-agent-2.11.2-5.40.2.ppc64le", "product_id": "qemu-guest-agent-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-lang-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-lang-2.11.2-5.40.2.ppc64le", "product_id": "qemu-lang-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-linux-user-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-linux-user-2.11.2-5.40.2.ppc64le", "product_id": "qemu-linux-user-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-ppc-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-ppc-2.11.2-5.40.2.ppc64le", "product_id": "qemu-ppc-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-s390-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-s390-2.11.2-5.40.2.ppc64le", "product_id": "qemu-s390-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-tools-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-tools-2.11.2-5.40.2.ppc64le", "product_id": "qemu-tools-2.11.2-5.40.2.ppc64le" } }, { "category": "product_version", "name": "qemu-x86-2.11.2-5.40.2.ppc64le", "product": { "name": "qemu-x86-2.11.2-5.40.2.ppc64le", "product_id": "qemu-x86-2.11.2-5.40.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "qemu-2.11.2-5.40.2.s390x", "product": { "name": "qemu-2.11.2-5.40.2.s390x", "product_id": "qemu-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-arm-2.11.2-5.40.2.s390x", "product": { "name": "qemu-arm-2.11.2-5.40.2.s390x", "product_id": "qemu-arm-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-block-curl-2.11.2-5.40.2.s390x", "product": { "name": "qemu-block-curl-2.11.2-5.40.2.s390x", "product_id": "qemu-block-curl-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-block-dmg-2.11.2-5.40.2.s390x", "product": { "name": "qemu-block-dmg-2.11.2-5.40.2.s390x", "product_id": "qemu-block-dmg-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-block-iscsi-2.11.2-5.40.2.s390x", "product": { "name": "qemu-block-iscsi-2.11.2-5.40.2.s390x", "product_id": "qemu-block-iscsi-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-block-rbd-2.11.2-5.40.2.s390x", "product": { "name": "qemu-block-rbd-2.11.2-5.40.2.s390x", "product_id": "qemu-block-rbd-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-block-ssh-2.11.2-5.40.2.s390x", "product": { "name": "qemu-block-ssh-2.11.2-5.40.2.s390x", "product_id": "qemu-block-ssh-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-extra-2.11.2-5.40.2.s390x", "product": { "name": "qemu-extra-2.11.2-5.40.2.s390x", "product_id": "qemu-extra-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-guest-agent-2.11.2-5.40.2.s390x", "product": { "name": "qemu-guest-agent-2.11.2-5.40.2.s390x", "product_id": "qemu-guest-agent-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-kvm-2.11.2-5.40.2.s390x", "product": { "name": "qemu-kvm-2.11.2-5.40.2.s390x", "product_id": "qemu-kvm-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-lang-2.11.2-5.40.2.s390x", "product": { "name": "qemu-lang-2.11.2-5.40.2.s390x", "product_id": "qemu-lang-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-linux-user-2.11.2-5.40.2.s390x", "product": { "name": "qemu-linux-user-2.11.2-5.40.2.s390x", "product_id": "qemu-linux-user-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-ppc-2.11.2-5.40.2.s390x", "product": { "name": "qemu-ppc-2.11.2-5.40.2.s390x", "product_id": "qemu-ppc-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-s390-2.11.2-5.40.2.s390x", "product": { "name": "qemu-s390-2.11.2-5.40.2.s390x", "product_id": "qemu-s390-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-tools-2.11.2-5.40.2.s390x", "product": { "name": "qemu-tools-2.11.2-5.40.2.s390x", "product_id": "qemu-tools-2.11.2-5.40.2.s390x" } }, { "category": "product_version", "name": "qemu-x86-2.11.2-5.40.2.s390x", "product": { "name": "qemu-x86-2.11.2-5.40.2.s390x", "product_id": "qemu-x86-2.11.2-5.40.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "qemu-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-2.11.2-5.40.2.x86_64", "product_id": "qemu-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-arm-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-arm-2.11.2-5.40.2.x86_64", "product_id": "qemu-arm-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-block-curl-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-block-curl-2.11.2-5.40.2.x86_64", "product_id": "qemu-block-curl-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-block-dmg-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-block-dmg-2.11.2-5.40.2.x86_64", "product_id": "qemu-block-dmg-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "product_id": "qemu-block-iscsi-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "product_id": "qemu-block-rbd-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "product_id": "qemu-block-ssh-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-extra-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-extra-2.11.2-5.40.2.x86_64", "product_id": "qemu-extra-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "product_id": "qemu-guest-agent-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-kvm-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-kvm-2.11.2-5.40.2.x86_64", "product_id": "qemu-kvm-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-lang-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-lang-2.11.2-5.40.2.x86_64", "product_id": "qemu-lang-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-linux-user-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-linux-user-2.11.2-5.40.2.x86_64", "product_id": "qemu-linux-user-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-ppc-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-ppc-2.11.2-5.40.2.x86_64", "product_id": "qemu-ppc-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-s390-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-s390-2.11.2-5.40.2.x86_64", "product_id": "qemu-s390-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-tools-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-tools-2.11.2-5.40.2.x86_64", "product_id": "qemu-tools-2.11.2-5.40.2.x86_64" } }, { "category": "product_version", "name": "qemu-x86-2.11.2-5.40.2.x86_64", "product": { "name": "qemu-x86-2.11.2-5.40.2.x86_64", "product_id": "qemu-x86-2.11.2-5.40.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE OpenStack Cloud 9", "product": { "name": "SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud:9" } } }, { "category": "product_name", "name": "SUSE OpenStack Cloud Crowbar 9", "product": { "name": "SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9", "product_identification_helper": { "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:9" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp4" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product": { "name": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:12:sp4" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ipxe-1.0.0+-5.40.2.noarch as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch" }, "product_reference": "qemu-ipxe-1.0.0+-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-kvm-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-lang-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-sgabios-8-5.40.2.noarch as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch" }, "product_reference": "qemu-sgabios-8-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-tools-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-x86-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud 9", "product_id": "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-x86-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ipxe-1.0.0+-5.40.2.noarch as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch" }, "product_reference": "qemu-ipxe-1.0.0+-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-kvm-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-lang-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-sgabios-8-5.40.2.noarch as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch" }, "product_reference": "qemu-sgabios-8-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-tools-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-x86-2.11.2-5.40.2.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", "product_id": "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-x86-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 9" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ipxe-1.0.0+-5.40.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch" }, "product_reference": "qemu-ipxe-1.0.0+-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-kvm-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-lang-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-lang-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ppc-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-ppc-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-sgabios-8-5.40.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch" }, "product_reference": "qemu-sgabios-8-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-tools-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-tools-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-x86-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-x86-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-arm-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-arm-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-curl-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-curl-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-iscsi-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-iscsi-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-block-rbd-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-rbd-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-rbd-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-block-ssh-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-block-ssh-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-guest-agent-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-guest-agent-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ipxe-1.0.0+-5.40.2.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch" }, "product_reference": "qemu-ipxe-1.0.0+-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-kvm-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-kvm-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-kvm-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-lang-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-lang-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-lang-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-lang-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-lang-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-ppc-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-ppc-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-s390-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-s390-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-sgabios-8-5.40.2.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch" }, "product_reference": "qemu-sgabios-8-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.aarch64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64" }, "product_reference": "qemu-tools-2.11.2-5.40.2.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.ppc64le as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le" }, "product_reference": "qemu-tools-2.11.2-5.40.2.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.s390x as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x" }, "product_reference": "qemu-tools-2.11.2-5.40.2.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-tools-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-tools-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch" }, "product_reference": "qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "qemu-x86-2.11.2-5.40.2.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", "product_id": "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64" }, "product_reference": "qemu-x86-2.11.2-5.40.2.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4-LTSS" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-35503", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-35503" } ], "notes": [ { "category": "general", "text": "A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-35503", "url": "https://www.suse.com/security/cve/CVE-2020-35503" }, { "category": "external", "summary": "SUSE Bug 1180432 for CVE-2020-35503", "url": "https://bugzilla.suse.com/1180432" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2020-35503" }, { "cve": "CVE-2020-35504", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-35504" } ], "notes": [ { "category": "general", "text": "A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-35504", "url": "https://www.suse.com/security/cve/CVE-2020-35504" }, { "category": "external", "summary": "SUSE Bug 1180433 for CVE-2020-35504", "url": "https://bugzilla.suse.com/1180433" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2020-35504" }, { "cve": "CVE-2020-35505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-35505" } ], "notes": [ { "category": "general", "text": "A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the \u0027Information Transfer\u0027 command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-35505", "url": "https://www.suse.com/security/cve/CVE-2020-35505" }, { "category": "external", "summary": "SUSE Bug 1180434 for CVE-2020-35505", "url": "https://bugzilla.suse.com/1180434" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2020-35505" }, { "cve": "CVE-2020-35506", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-35506" } ], "notes": [ { "category": "general", "text": "A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the \u0027Information Transfer\u0027 command (CMD_TI). This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service or potential code execution with the privileges of the QEMU process.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-35506", "url": "https://www.suse.com/security/cve/CVE-2020-35506" }, { "category": "external", "summary": "SUSE Bug 1180435 for CVE-2020-35506", "url": "https://bugzilla.suse.com/1180435" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2020-35506" }, { "cve": "CVE-2021-20255", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-20255" } ], "notes": [ { "category": "general", "text": "A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-20255", "url": "https://www.suse.com/security/cve/CVE-2021-20255" }, { "category": "external", "summary": "SUSE Bug 1182651 for CVE-2021-20255", "url": "https://bugzilla.suse.com/1182651" }, { "category": "external", "summary": "SUSE Bug 1182654 for CVE-2021-20255", "url": "https://bugzilla.suse.com/1182654" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.2, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "low" } ], "title": "CVE-2021-20255" }, { "cve": "CVE-2021-3527", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3527" } ], "notes": [ { "category": "general", "text": "A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3527", "url": "https://www.suse.com/security/cve/CVE-2021-3527" }, { "category": "external", "summary": "SUSE Bug 1186012 for CVE-2021-3527", "url": "https://bugzilla.suse.com/1186012" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.8, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "low" } ], "title": "CVE-2021-3527" }, { "cve": "CVE-2021-3682", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3682" } ], "notes": [ { "category": "general", "text": "A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3682", "url": "https://www.suse.com/security/cve/CVE-2021-3682" }, { "category": "external", "summary": "SUSE Bug 1189145 for CVE-2021-3682", "url": "https://bugzilla.suse.com/1189145" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2021-3682" }, { "cve": "CVE-2021-3713", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3713" } ], "notes": [ { "category": "general", "text": "An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked, which can lead to out-of-bounds access to the UASDevice-\u003edata3 and UASDevice-\u003estatus3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3713", "url": "https://www.suse.com/security/cve/CVE-2021-3713" }, { "category": "external", "summary": "SUSE Bug 1189702 for CVE-2021-3713", "url": "https://bugzilla.suse.com/1189702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "important" } ], "title": "CVE-2021-3713" }, { "cve": "CVE-2021-3748", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3748" } ], "notes": [ { "category": "general", "text": "A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor\u0027s address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3748", "url": "https://www.suse.com/security/cve/CVE-2021-3748" }, { "category": "external", "summary": "SUSE Bug 1189938 for CVE-2021-3748", "url": "https://bugzilla.suse.com/1189938" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.aarch64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.s390x", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.ppc64le", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.40.2.x86_64", "SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.40.2.noarch", "SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.40.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-11-09T09:52:13Z", "details": "moderate" } ], "title": "CVE-2021-3748" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…