RHSA-2022:7967
Vulnerability from csaf_opensuse - Published: 2022-11-15 00:00 - Updated: 2026-09-20 11:24Summary
security update for qemu-kvm
Severity
Moderate
Notes
Title of the patch: security update for qemu-kvm
Description of the patch: This security update provides a functional equivalent of RHSA-2022:7967.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2022:7967.
Patchnames: RHSA-2022:7967
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.4 (Medium)
Affected products
Recommended
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2021-3507
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
21 products, the same list as for
CVE-2021-3507
Threats
Impact
important
6 (Medium)
Affected products
Recommended
21 products, the same list as for
CVE-2021-3507
Threats
Impact
moderate
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for qemu-kvm",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2022:7967.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2022:7967.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2022:7967",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2022_7967.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3507 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3507/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3611 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-3750 page",
"url": "https://www.suse.com/security/cve/CVE-2021-3750/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-4158 page",
"url": "https://www.suse.com/security/cve/CVE-2021-4158/"
}
],
"title": "security update for qemu-kvm",
"tracking": {
"current_release_date": "2026-09-20T11:24:27Z",
"generator": {
"date": "2022-11-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2022:7967",
"initial_release_date": "2022-11-15T00:00:00Z",
"revision_history": [
{
"date": "2022-11-15T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:24:27Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:qemu:qemu:7.0.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/qemu-guest-agent@7.0.0-13.el9?arch=x86_64\u0026epoch=17\u0026upstream=qemu-17:7.0.0-13.el9.src.rpm"
}
}
},
{
"category": "product_version",
"name": "qemu-img-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-img-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-img-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:qemu:qemu:7.0.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/qemu-img@7.0.0-13.el9?arch=x86_64\u0026epoch=17\u0026upstream=qemu-17:7.0.0-13.el9.src.rpm"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:qemu:qemu:7.0.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/qemu-kvm@7.0.0-13.el9?arch=x86_64\u0026epoch=17\u0026upstream=qemu-17:7.0.0-13.el9.src.rpm"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-audio-pa@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-block-curl@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-block-rbd@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-common@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-core@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-gpu@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-gpu-gl@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-gpu-pci@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-gpu-pci-gl@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-vga@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-display-virtio-vga-gl@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-usb-host@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-device-usb-redirect@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-docs@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-tools@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-ui-egl-headless@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/qemu-kvm-ui-opengl@7.0.0-13.el9?arch=x86_64\u0026epoch=17"
}
}
},
{
"category": "product_version",
"name": "qemu-pr-helper-17:7.0.0-13.el9.x86_64",
"product": {
"name": "qemu-pr-helper-17:7.0.0-13.el9.x86_64",
"product_id": "qemu-pr-helper-17:7.0.0-13.el9.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:qemu:qemu:7.0.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/qemu-pr-helper@7.0.0-13.el9?arch=x86_64\u0026epoch=17\u0026upstream=qemu-17:7.0.0-13.el9.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-img-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-core-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-docs-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-pr-helper-17:7.0.0-13.el9.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
},
"product_reference": "qemu-pr-helper-17:7.0.0-13.el9.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-3507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3507"
}
],
"notes": [
{
"category": "general",
"text": "A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3507",
"url": "https://www.suse.com/security/cve/CVE-2021-3507"
},
{
"category": "external",
"summary": "SUSE Bug 1185000 for CVE-2021-3507",
"url": "https://bugzilla.suse.com/1185000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3507"
},
{
"cve": "CVE-2021-3611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3611"
}
],
"notes": [
{
"category": "general",
"text": "A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3611",
"url": "https://www.suse.com/security/cve/CVE-2021-3611"
},
{
"category": "external",
"summary": "SUSE Bug 1187529 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1187529"
},
{
"category": "external",
"summary": "SUSE Bug 1193914 for CVE-2021-3611",
"url": "https://bugzilla.suse.com/1193914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-3611"
},
{
"cve": "CVE-2021-3750",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-3750"
}
],
"notes": [
{
"category": "general",
"text": "A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller\u0027s registers and trigger undesirable actions (such as reset) while the device is still transferring packets. This can ultimately lead to a use-after-free issue. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host. This flaw affects QEMU versions before 7.0.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-3750",
"url": "https://www.suse.com/security/cve/CVE-2021-3750"
},
{
"category": "external",
"summary": "SUSE Bug 1190011 for CVE-2021-3750",
"url": "https://bugzilla.suse.com/1190011"
},
{
"category": "external",
"summary": "SUSE Bug 1190015 for CVE-2021-3750",
"url": "https://bugzilla.suse.com/1190015"
},
{
"category": "external",
"summary": "SUSE Bug 1193880 for CVE-2021-3750",
"url": "https://bugzilla.suse.com/1193880"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2021-3750"
},
{
"cve": "CVE-2021-4158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-4158"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-4158",
"url": "https://www.suse.com/security/cve/CVE-2021-4158"
},
{
"category": "external",
"summary": "SUSE Bug 1194063 for CVE-2021-4158",
"url": "https://bugzilla.suse.com/1194063"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:qemu-guest-agent-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-img-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-audio-pa-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-curl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-block-rbd-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-common-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-core-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-gpu-pci-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-display-virtio-vga-gl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-host-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-device-usb-redirect-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-docs-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-tools-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-egl-headless-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-kvm-ui-opengl-17:7.0.0-13.el9.x86_64",
"SUSE Liberty Linux 9:qemu-pr-helper-17:7.0.0-13.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-11-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2021-4158"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…