Every CVE Search/ Get API key

CVE-2020-14364

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...

5.0 MediumPublic exploitFix available

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

5.40%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-125, CWE-787
Updated
2026-11-02
CVE List No score

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
CVE-2020-14364
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2020-6507 No score

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
EUVD-2020-6507
Updated
2026-11-03
GitHub AdvisoriesGHSA-fq9g-vccc-q7c7 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions...

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
GHSA-fq9g-vccc-q7c7
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-125, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2020-14364 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
ALPINE-CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-03
OSVBELL-CVE-2020-14364 5.0

CVE-2020-14364 does not affect BellSoft software

Record
BELL-CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
Show 46 moreShow less
OSV 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2020-14364 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
DEBIAN-CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4047 5.0

Red Hat Security Advisory: qemu-kvm-ma security update

Record
RHSA-2020:4047
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4048 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4048
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4049 5.0

Red Hat Security Advisory: virt:rhel security update

Record
RHSA-2020:4049
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4050 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4050
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4051 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4051
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4052 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4052
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4053 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4053
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4054 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4054
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4055 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4055
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4056 5.0

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4056
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4058 5.0

Red Hat Security Advisory: virt:rhel security update

Record
RHSA-2020:4058
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4059 6.5

Red Hat Security Advisory: virt:rhel security update

Record
RHSA-2020:4059
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2020:4078 5.0

Red Hat Security Advisory: qemu-kvm-ma security update

Record
RHSA-2020:4078
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4079 6.5

Red Hat Security Advisory: qemu-kvm security update

Record
RHSA-2020:4079
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:4111 5.0

Red Hat Security Advisory: qemu-kvm-rhev security update

Record
RHSA-2020:4111
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4115 8.2

Red Hat Security Advisory: redhat-release-virtualization-host and redhat-virtualization-host security update

Record
RHSA-2020:4115
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4162 5.0

Red Hat Security Advisory: qemu-kvm-ma security update

Record
RHSA-2020:4162
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4167 5.0

Red Hat Security Advisory: qemu-kvm-rhev security update

Record
RHSA-2020:4167
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4172 8.2

Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

Record
RHSA-2020:4172
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4176 5.0

Red Hat Security Advisory: qemu-kvm-rhev security update

Record
RHSA-2020:4176
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4290 6.5

Red Hat Security Advisory: virt:8.1 and virt-devel:8.1 security update

Record
RHSA-2020:4290
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2020:4291 5.0

Red Hat Security Advisory: virt:8.2 and virt-devel:8.2 security and bug fix update

Record
RHSA-2020:4291
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2020:4059 6.5

Important: virt:rhel security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:Rocky Linux module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)

  • QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2020:4059
CVSS 3.1
6.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-14364 5.0

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

Record
UBUNTU-CVE-2020-14364
CVSS 3.1
5.0 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVALSA-2020:4059 No score

Important: virt:rhel security update

Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

  • QEMU: usb: out-of-bounds r/w access issue while processing usb packets (CVE-2020-14364)

  • QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2020:4059
Updated
2026-11-02
OSVopenSUSE-SU-2020:1664-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2020-14364: Fixed an OOB access while processing USB packets (bsc#1175441,bsc#1176494).
  • CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs (bsc#1174641).
  • CVE-2020-15863: Fixed a buffer overflow in the XGMAC device (bsc#1174386).
  • CVE-2020-24352: Fixed an out-of-bounds read/write in ati-vga device emulation in ati_2d_blt (bsc#1175370).
  • Allow to IPL secure guests with -no-reboot (bsc#1174863)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2020:1664-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1043-1 No score

Security update for qemu

This update for qemu fixes the following issues:

Security issues fixed:

  • CVE-2021-3546: Fix out-of-bounds write in virgl_cmd_get_capset (bsc#1185981)
  • CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device (bsc#1186010)
  • CVE-2021-3545: Fix information disclosure due to uninitialized memory read (bsc#1185990)
  • CVE-2020-25085: Fix out-of-bounds access issue while doing multi block SDMA (bsc#1176681)
  • CVE-2020-10756: Fix out-of-bounds read information disclosure in icmp6_send_echoreply(bsc#1172380)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975)

Non-security issues fixed:

  • Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • Host CPU microcode revision will be visible inside VMs when the proper CPU-model is used (jsc#SLE-17785):
  • Fix testsuite error (bsc#1184574)
  • Fix qemu crash with iothread when block commit after snapshot (bsc#1187013)
  • Fix qemu hang while cancelling migrating hugepage vm (bsc#1185591)
  • Use RCU to avoid race during scsi hotplug/hotunplug (bsc#1184574)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1043-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1942-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a module to what was accepted upstream (bsc#1181103)
  • Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144, CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  • Fix potential privilege escalation in virtiofsd tool (CVE-2021-20263, bsc#1183373)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • QEMU BIOS fails to read stage2 loader on s390x (bsc#1186290)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)
Record
openSUSE-SU-2021:1942-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11287-1 No score

qemu-6.1.0-32.1 on GA media

These are all security issues fixed in the qemu-6.1.0-32.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11287-1
Updated
2026-11-02
OSVSUSE-SU-2020:14521-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2020-0543: Fixed a leak of Special Register Buffer Data Sampling (SRBDS) aka 'CrossTalk' (bsc#1172205,XSA-320)
  • CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
  • CVE-2020-15565: Fixed an issue cache write (bsc#1173378,XSA-321).
  • CVE-2020-15567: Fixed an issue with non-atomic modification of live EPT PTE (bsc#1173380,XSA-328)
  • CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
  • CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
  • CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
  • CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
  • CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
  • CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
  • CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
Record
SUSE-SU-2020:14521-1
Updated
2026-11-02
OSVSUSE-SU-2020:2743-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2020-13361: Fixed an OOB access possibility in ES1370 audio device emulation (bsc#1172384).
  • CVE-2020-14364: Fixed an OOB access while processing USB packets (bsc#1175441).
  • CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs (bsc#1174641).
  • CVE-2020-15863: Fixed a buffer overflow in the XGMAC device (bsc#1174386).
  • Fix OOB access in ROM loading
Record
SUSE-SU-2020:2743-1
Updated
2026-11-02
OSVSUSE-SU-2020:2786-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)
  • CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334)
  • CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
  • CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
  • CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
  • CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
  • CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
  • CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
  • CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
  • CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
  • CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
  • Various bug fixes (bsc#1027519)
Record
SUSE-SU-2020:2786-1
Updated
2026-11-02
OSVSUSE-SU-2020:2787-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
  • CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
  • CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
  • CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
  • CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
  • CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
  • CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
  • CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
  • CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
  • Various bug fixes (bsc#1027519)
Record
SUSE-SU-2020:2787-1
Updated
2026-11-02
OSVSUSE-SU-2020:2788-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)
  • CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334)
  • CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
  • CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
  • CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
  • CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
  • CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
  • CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
  • CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
  • CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
  • CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
  • Various bug fixes (bsc#1027519)
Record
SUSE-SU-2020:2788-1
Updated
2026-11-02
OSVSUSE-SU-2020:2822-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
  • CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
  • CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
  • CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
  • CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
  • CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
  • CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
  • CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
  • CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
  • CVE-2020-0543: Fixed a leak of Special Register Buffer Data Sampling (SRBDS) aka 'CrossTalk' (bsc#1172205,XSA-320)
  • CVE-2020-15565: Fixed an issue cache write (bsc#1173378,XSA-321).
  • CVE-2020-15567: Fixed an issue with non-atomic modification of live EPT PTE (bsc#1173380,XSA-328)
Record
SUSE-SU-2020:2822-1
Updated
2026-11-02
OSVSUSE-SU-2020:2877-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • CVE-2020-14364: Fixed an OOB access while processing USB packets (bsc#1175441,bsc#1176494).
  • CVE-2020-16092: Fixed a denial of service in packet processing of various emulated NICs (bsc#1174641).
  • CVE-2020-15863: Fixed a buffer overflow in the XGMAC device (bsc#1174386).
  • CVE-2020-24352: Fixed an out-of-bounds read/write in ati-vga device emulation in ati_2d_blt (bsc#1175370).
  • Allow to IPL secure guests with -no-reboot (bsc#1174863)
Record
SUSE-SU-2020:2877-1
Updated
2026-11-02
OSVSUSE-SU-2021:1240-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386
  • Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
Record
SUSE-SU-2021:1240-1
Updated
2026-11-02
OSVSUSE-SU-2021:1241-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386)
  • Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641)
  • Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478)
  • Fix qemu-testsuite failure
  • Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115)
  • Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933)
  • Fix slowness in arm32 emulation (bsc#1112499)
  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386)
  • Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641)
  • Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)…
Record
SUSE-SU-2021:1241-1
Updated
2026-11-02
OSVSUSE-SU-2021:1244-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386
  • Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file (bsc#1129962)
  • Fix migration failure with error message: 'error while loading state section id 3(ram) (bsc#1154790)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  • Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
  • Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
  • Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart [email protected]' error while updating the qemu-guest-agent. (bsc#1178565)
  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
Record
SUSE-SU-2021:1244-1
Updated
2026-11-02
OSVSUSE-SU-2021:1245-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  • Fix issue where s390 guest fails to find zipl boot menu index (bsc#1183979)
  • Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Apply fixes to qemu scsi passthrough with respect to timeout and error conditions, including using more correct status codes. (bsc#1178049)
  • Fix OOB access in ARM interrupt handling (CVE-2021-20221 bsc#1181933)
  • Tweaks to spec file for better formatting, and remove not needed BuildRequires for e2fsprogs-devel and libpcap-devel
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
  • Use '%service_del_postun_without_restart' instead of '%service_del_postun' to avoid 'Failed to try-restart [email protected]' error while updating the qemu-guest-agent. (bsc#1178565)
Record
SUSE-SU-2021:1245-1
Updated
2026-11-02
OSVSUSE-SU-2021:1305-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612)
  • Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577)
  • Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968)
  • Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416)
  • Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)
  • Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659 bsc#1172386
  • Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  • Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  • Fix buffer overflow in the XGMAC device (CVE-2020-15863 bsc#1174386)
  • Fix DoS in packet processing of various emulated NICs (CVE-2020-16092 bsc#1174641)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
Record
SUSE-SU-2021:1305-1
Updated
2026-11-02
OSVSUSE-SU-2021:14704-1 No score

Security update for kvm

This update for kvm fixes the following issues:

  • Fix OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  • Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
Record
SUSE-SU-2021:14704-1
Updated
2026-11-02
OSVSUSE-SU-2021:14706-1 No score

Security update for kvm

This update for kvm fixes the following issues:

  • Fix OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c (CVE-2020-12829, bsc#1172385)
  • Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)
  • Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)
  • Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)
  • Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)
  • Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)
  • Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  • Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  • Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)
  • Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)
  • Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)
  • Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)
  • Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  • Fix for similar problems as for the original fix prompting this issue (CVE-2019-6778 bsc#1123156)
  • Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 CVE-2020-7039 bsc#1161066)
  • Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  • Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873)
  • Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)
  • Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
Record
SUSE-SU-2021:14706-1
Updated
2026-11-02
OSVSUSE-SU-2021:1829-1 No score

Security update for qemu

This update for qemu fixes the following issues:

  • Fix OOB access during mmio operations (CVE-2020-13754, bsc#1172382)
  • Fix sPAPR emulator leaks the host hardware identity (CVE-2019-8934, bsc#1126455)
  • Fix out-of-bounds read information disclosure in icmp6_send_echoreply (CVE-2020-10756, bsc#1172380)
  • Fix out-of-bound heap buffer access via an interrupt ID field (CVE-2021-20221, bsc#1181933)
  • For the record, these issues are fixed in this package already. Most are alternate references to previously mentioned issues: (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019, CVE-2020-14364, bsc#1175534, CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477, CVE-2021-20257, bsc#1182846, CVE-2021-3419, bsc#1182975, bsc#1031692, bsc#1094725)
Record
SUSE-SU-2021:1829-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qemu
Alpine:v3.12
 before 5.0.0-r2
5.0.0-r2
qemu
Alpine:v3.13
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.14
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.15
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.16
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.17
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.18
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.19
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.20
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.21
 before 5.1.0-r1
5.1.0-r1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
qemu
Alpine:v3.22
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.23
 before 5.1.0-r1
5.1.0-r1
qemu
Alpine:v3.24
 before 5.1.0-r1
5.1.0-r1
xen
Alpine:v3.10
 before 4.12.3-r3
4.12.3-r3
xen
Alpine:v3.11
 before 4.13.1-r3
4.13.1-r3
xen
Alpine:v3.12
 before 4.13.1-r3
4.13.1-r3
xen
Alpine:v3.13
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.14
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.15
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.16
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.17
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.18
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.19
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.20
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.21
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.22
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.23
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.24
 before 4.13.1-r5
4.13.1-r5
xen
Alpine:v3.9
 before 4.11.4-r1
4.11.4-r1
libiscsi
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.5.0+2608+72063365
1.18.0-8.module_el8.5.0+2608+72063365
libiscsi
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
1.18.0-8.module_el8.3.0+2048+e7a0a3ea
libiscsi-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
1.18.0-8.module_el8.3.0+2048+e7a0a3ea
libiscsi-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.5.0+2608+72063365
1.18.0-8.module_el8.5.0+2608+72063365
libiscsi-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.3.0+2048+e7a0a3ea
1.18.0-8.module_el8.3.0+2048+e7a0a3ea
libiscsi-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.6.0+2880+7d9e3703
1.18.0-8.module_el8.6.0+2880+7d9e3703
libiscsi-utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.18.0-8.module_el8.5.0+2608+72063365
1.18.0-8.module_el8.5.0+2608+72063365
netcf
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.5.0+2608+72063365
0.2.8-12.module_el8.5.0+2608+72063365
netcf
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
0.2.8-12.module_el8.3.0+2048+e7a0a3ea
netcf-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
0.2.8-12.module_el8.3.0+2048+e7a0a3ea
netcf-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.5.0+2608+72063365
0.2.8-12.module_el8.5.0+2608+72063365
netcf-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.6.0+2880+7d9e3703
0.2.8-12.module_el8.6.0+2880+7d9e3703
netcf-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.5.0+2608+72063365
0.2.8-12.module_el8.5.0+2608+72063365
netcf-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.8-12.module_el8.3.0+2048+e7a0a3ea
0.2.8-12.module_el8.3.0+2048+e7a0a3ea
sgabios
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module_el8.5.0+2608+72063365
1:0.20170427git-3.module_el8.5.0+2608+72063365
sgabios
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea
1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea
sgabios-bin
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module_el8.5.0+2608+72063365
1:0.20170427git-3.module_el8.5.0+2608+72063365
sgabios-bin
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
1:0.20170427git-3.module_el8.6.0+2880+7d9e3703
qemu
Debian:12
 before 1:5.1+dfsg-4
1:5.1+dfsg-4
qemu
Debian:13
 before 1:5.1+dfsg-4
1:5.1+dfsg-4
qemu
Debian:14
 before 1:5.1+dfsg-4
1:5.1+dfsg-4
qemu
Debian:9
From an advisory covering 4 CVEs
 before 1:2.8+dfsg-6+deb9u11, plus listed versions
1:2.8+dfsg-61:2.8+dfsg-6+deb9u11:2.8+dfsg-6+deb9u101:2.8+dfsg-6+deb9u21:2.8+dfsg-6+deb9u3
Show 6 moreShow less
1:2.8+dfsg-6+deb9u41:2.8+dfsg-6+deb9u51:2.8+dfsg-6+deb9u61:2.8+dfsg-6+deb9u71:2.8+dfsg-6+deb9u81:2.8+dfsg-6+deb9u9
1:2.8+dfsg-6+deb9u11
qemu
Debian:10
From an advisory covering 4 CVEs
 before 1:3.1+dfsg-8+deb10u8, plus listed versions
1:3.1+dfsg-81:3.1+dfsg-8+deb10u21:3.1+dfsg-8+deb10u31:3.1+dfsg-8+deb10u41:3.1+dfsg-8+deb10u51:3.1+dfsg-8+deb10u61:3.1+dfsg-8+deb10u71:3.1+dfsg-8~deb10u1
1:3.1+dfsg-8+deb10u8
qemu-img-ma
Red Hat:rhel_eus:7.7::server
 before 10:2.12.0-33.el7_7.4
10:2.12.0-33.el7_7.4
qemu-kvm-common-ma
Red Hat:rhel_eus:7.7::server
 before 10:2.12.0-33.el7_7.4
10:2.12.0-33.el7_7.4
qemu-kvm-ma
Red Hat:rhel_eus:7.7::server
 before 10:2.12.0-33.el7_7.4
10:2.12.0-33.el7_7.4
qemu-kvm-ma-debuginfo
Red Hat:rhel_eus:7.7::server
 before 10:2.12.0-33.el7_7.4
10:2.12.0-33.el7_7.4
qemu-kvm-tools-ma
Red Hat:rhel_eus:7.7::server
 before 10:2.12.0-33.el7_7.4
10:2.12.0-33.el7_7.4
libcacard
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
qemu-img
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
qemu-kvm
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
qemu-kvm-common
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
qemu-kvm-debuginfo
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
qemu-kvm-tools
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
libcacard-devel
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
libcacard-tools
Red Hat:rhel_aus:7.2::server
 before 10:1.5.3-105.el7_2.20
10:1.5.3-105.el7_2.20
SLOF
Red Hat:rhel_eus:8.1::appstream
 before 0:20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab
0:20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab
hivex
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
libguestfs
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-bash-completion
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-benchmarking
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-benchmarking-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-devel
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gfs2
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gobject
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gobject-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gobject-devel
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-inspect-icons
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-java
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-java-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-java-devel
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-javadoc
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-man-pages-ja
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-man-pages-uk
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-rescue
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-rsync
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-tools
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-tools-c
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-tools-c-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-winsupport
Red Hat:rhel_eus:8.1::appstream
 before 0:8.0-4.module+el8.1.0+4066+0f1aadab
0:8.0-4.module+el8.1.0+4066+0f1aadab
libguestfs-xfs
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libiscsi
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utils
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utils-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.18.0-8.module+el8.1.0+4066+0f1aadab
0:1.18.0-8.module+el8.1.0+4066+0f1aadab
libvirt
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-admin
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-admin-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-bash-completion
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-client
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-client-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-config-network
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-config-nwfilter
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-interface
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-interface-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-network
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-network-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-nodedev
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-nodedev-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-nwfilter
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-nwfilter-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-qemu
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-qemu-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-secret
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-secret-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-core
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-core-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-disk
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-disk-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-gluster
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-gluster-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-iscsi
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-iscsi-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-logical
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-logical-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-mpath
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-mpath-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-rbd
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-rbd-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-scsi
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-driver-storage-scsi-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-daemon-kvm
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-dbus
Red Hat:rhel_eus:8.1::appstream
 before 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-dbus-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-dbus-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.2.0-3.module+el8.1.0+4066+0f1aadab
0:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-docs
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-libs
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-libs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-lock-sanlock
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-lock-sanlock-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-nss
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-nss-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
0:4.5.0-35.3.module+el8.1.0+5931+8897e7e1
libvirt-python
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
0:4.5.0-2.module+el8.1.0+4066+0f1aadab
libvirt-python-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-2.module+el8.1.0+4066+0f1aadab
0:4.5.0-2.module+el8.1.0+4066+0f1aadab
lua-guestfs
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
lua-guestfs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
nbdkit
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-bash-completion
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-basic-plugins
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-basic-plugins-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-example-plugins
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-example-plugins-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-gzip
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-gzip-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python-common
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python3
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python3-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-vddk
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-vddk-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-xz
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-xz-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.4.2-5.module+el8.1.0+4066+0f1aadab
0:1.4.2-5.module+el8.1.0+4066+0f1aadab
netcf
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-devel
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libs
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:0.2.8-12.module+el8.1.0+4066+0f1aadab
0:0.2.8-12.module+el8.1.0+4066+0f1aadab
perl-Sys-Guestfs
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
perl-Sys-Guestfs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
perl-Sys-Virt
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
0:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-Sys-Virt-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
0:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-Sys-Virt-debugsource
Red Hat:rhel_eus:8.1::appstream
 before 0:4.5.0-5.module+el8.1.0+4066+0f1aadab
0:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-hivex
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
perl-hivex-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-hivex
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-hivex-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 0:1.3.15-7.module+el8.1.0+4066+0f1aadab
0:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-libguestfs
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
python3-libguestfs-debuginfo
Red Hat:rhel_eus:8.1::appstream
 before 1:1.38.4-14.module+el8.1.0+4066+0f1aadab
1:1.38.4-14.module+el8.1.0+4066+0f1aadab
libiscsi
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.0-8.module+el8.7.0+1084+97b81f61
0:1.18.0-8.module+el8.7.0+1084+97b81f61
libiscsi
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.0-8.module+el8.4.0+534+4680a14e
0:1.18.0-8.module+el8.4.0+534+4680a14e
libiscsi
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.18.0-8.module+el8.6.0+847+b490afdd
0:1.18.0-8.module+el8.6.0+847+b490afdd
netcf
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.8-12.module+el8.7.0+1084+97b81f61
0:0.2.8-12.module+el8.7.0+1084+97b81f61
netcf
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.8-12.module+el8.4.0+534+4680a14e
0:0.2.8-12.module+el8.4.0+534+4680a14e
netcf
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.8-12.module+el8.6.0+847+b490afdd
0:0.2.8-12.module+el8.6.0+847+b490afdd
sgabios
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module+el8.7.0+1084+97b81f61
1:0.20170427git-3.module+el8.7.0+1084+97b81f61
sgabios
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module+el8.4.0+534+4680a14e
1:0.20170427git-3.module+el8.4.0+534+4680a14e
sgabios
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:0.20170427git-3.module+el8.6.0+847+b490afdd
1:0.20170427git-3.module+el8.6.0+847+b490afdd
xen
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 11 CVEs
 before 4.4.4_44-61.55.1
4.4.4_44-61.55.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 3.1.1.1-45.1
3.1.1.1-45.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 3.1.1.1-45.1
3.1.1.1-45.1
xen
SUSE:OpenStack Cloud 9
From an advisory covering 10 CVEs
 before 4.11.4_08-2.36.1
4.11.4_08-2.36.1
xen
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 10 CVEs
 before 4.11.4_08-2.36.1
4.11.4_08-2.36.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 10 CVEs
 before 4.11.4_08-2.36.1
4.11.4_08-2.36.1
xen
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 10 CVEs
 before 4.11.4_08-2.36.1
4.11.4_08-2.36.1
xen
SUSE:HPE Helion OpenStack 8
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:OpenStack Cloud 8
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:Enterprise Storage 5
From an advisory covering 9 CVEs
 before 4.9.4_12-3.74.1
4.9.4_12-3.74.1
xen
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 4.12.3_08-3.24.1
4.12.3_08-3.24.1
xen
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 4.12.3_08-3.24.1
4.12.3_08-3.24.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 4.12.3_08-3.24.1
4.12.3_08-3.24.1
xen
SUSE:OpenStack Cloud 7
From an advisory covering 12 CVEs
 before 4.7.6_10-43.67.1
4.7.6_10-43.67.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 12 CVEs
 before 4.7.6_10-43.67.1
4.7.6_10-43.67.1
xen
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 12 CVEs
 before 4.7.6_10-43.67.1
4.7.6_10-43.67.1
xen
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 4.7.6_10-43.67.1
4.7.6_10-43.67.1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 4 CVEs
 before 4.2.1-11.10.1
4.2.1-11.10.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 4 CVEs
 before 4.2.1-11.10.1
4.2.1-11.10.1
qemu
SUSE:HPE Helion OpenStack 8
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:OpenStack Cloud 8
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 22 CVEs
 before 2.9.1-6.47.1
2.9.1-6.47.1
qemu
SUSE:OpenStack Cloud 9
From an advisory covering 24 CVEs
 before 2.11.2-5.29.1
2.11.2-5.29.1
qemu
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 24 CVEs
 before 2.11.2-5.29.1
2.11.2-5.29.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 24 CVEs
 before 2.11.2-5.29.1
2.11.2-5.29.1
qemu
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 24 CVEs
 before 2.11.2-5.29.1
2.11.2-5.29.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 24 CVEs
 before 2.11.2-9.43.1
2.11.2-9.43.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 24 CVEs
 before 2.11.2-9.43.1
2.11.2-9.43.1
qemu
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 24 CVEs
 before 2.11.2-9.43.1
2.11.2-9.43.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 24 CVEs
 before 2.11.2-9.43.1
2.11.2-9.43.1
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Manager Proxy 4.0
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Manager Server 4.0
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Enterprise Storage 6
From an advisory covering 25 CVEs
 before 3.1.1.1-9.24.3
3.1.1.1-9.24.3
qemu
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 21 CVEs
 before 2.6.2-41.62.1
2.6.2-41.62.1
kvm
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 15 CVEs
 before 1.4.2-60.34.1
1.4.2-60.34.1
kvm
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 21 CVEs
 before 1.4.2-53.38.1
1.4.2-53.38.1
qemu
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 2.6.2-41.65.1
2.6.2-41.65.1
qemu
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 3.1.1.1-51.1
3.1.1.1-51.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 3.1.1.1-51.1
3.1.1.1-51.1
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 11 CVEs
 before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 11 CVEs
 before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 11 CVEs
 before 4.2.1-11.19.2
4.2.1-11.19.2
qemu
SUSE:HPE Helion OpenStack 8
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:OpenStack Cloud 8
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 11 CVEs
 before 2.9.1-6.50.1
2.9.1-6.50.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 11 CVEs
 before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 11 CVEs
 before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 11 CVEs
 before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 11 CVEs
 before 2.11.2-9.46.1
2.11.2-9.46.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Proxy 4.0
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Manager Server 4.0
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Enterprise Storage 6
From an advisory covering 10 CVEs
 before 3.1.1.1-9.27.2
3.1.1.1-9.27.2
qemu
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 14 CVEs
 before 5.2.0-17.1
5.2.0-17.1
qemu
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 14 CVEs
 before 5.2.0-17.1
5.2.0-17.1
qemu
SUSE:OpenStack Cloud 9
From an advisory covering 11 CVEs
 before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 11 CVEs
 before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 11 CVEs
 before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 11 CVEs
 before 2.11.2-5.32.1
2.11.2-5.32.1
qemu
Ubuntu:Pro:14.04:LTS
 before 2.0.0+dfsg-2ubuntu1.47+esm1, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 45 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.142.0.0+dfsg-2ubuntu1.152.0.0+dfsg-2ubuntu1.162.0.0+dfsg-2ubuntu1.172.0.0+dfsg-2ubuntu1.182.0.0+dfsg-2ubuntu1.192.0.0+dfsg-2ubuntu1.202.0.0+dfsg-2ubuntu1.212.0.0+dfsg-2ubuntu1.222.0.0+dfsg-2ubuntu1.242.0.0+dfsg-2ubuntu1.252.0.0+dfsg-2ubuntu1.26
2.0.0+dfsg-2ubuntu1.47+esm1
qemu
Ubuntu:16.04:LTS
 before 1:2.5+dfsg-5ubuntu10.46, plus listed versions
1:2.3+dfsg-5ubuntu91:2.3+dfsg-5ubuntu101:2.4+dfsg-4ubuntu11:2.4+dfsg-4ubuntu21:2.4+dfsg-4ubuntu3
Show 45 moreShow less
1:2.4+dfsg-5ubuntu31:2.5+dfsg-1ubuntu21:2.5+dfsg-1ubuntu31:2.5+dfsg-1ubuntu41:2.5+dfsg-1ubuntu51:2.5+dfsg-5ubuntu11:2.5+dfsg-5ubuntu21:2.5+dfsg-5ubuntu41:2.5+dfsg-5ubuntu61:2.5+dfsg-5ubuntu71:2.5+dfsg-5ubuntu101:2.5+dfsg-5ubuntu10.11:2.5+dfsg-5ubuntu10.21:2.5+dfsg-5ubuntu10.31:2.5+dfsg-5ubuntu10.41:2.5+dfsg-5ubuntu10.51:2.5+dfsg-5ubuntu10.61:2.5+dfsg-5ubuntu10.71:2.5+dfsg-5ubuntu10.81:2.5+dfsg-5ubuntu10.91:2.5+dfsg-5ubuntu10.101:2.5+dfsg-5ubuntu10.111:2.5+dfsg-5ubuntu10.131:2.5+dfsg-5ubuntu10.141:2.5+dfsg-5ubuntu10.151:2.5+dfsg-5ubuntu10.161:2.5+dfsg-5ubuntu10.201:2.5+dfsg-5ubuntu10.211:2.5+dfsg-5ubuntu10.221:2.5+dfsg-5ubuntu10.241:2.5+dfsg-5ubuntu10.251:2.5+dfsg-5ubuntu10.261:2.5+dfsg-5ubuntu10.281:2.5+dfsg-5ubuntu10.291:2.5+dfsg-5ubuntu10.301:2.5+dfsg-5ubuntu10.311:2.5+dfsg-5ubuntu10.321:2.5+dfsg-5ubuntu10.331:2.5+dfsg-5ubuntu10.341:2.5+dfsg-5ubuntu10.351:2.5+dfsg-5ubuntu10.361:2.5+dfsg-5ubuntu10.371:2.5+dfsg-5ubuntu10.381:2.5+dfsg-5ubuntu10.391:2.5+dfsg-5ubuntu10.40
1:2.5+dfsg-5ubuntu10.46
qemu
Ubuntu:18.04:LTS
 before 1:2.11+dfsg-1ubuntu7.32, plus listed versions
1:2.10+dfsg-0ubuntu31:2.10+dfsg-0ubuntu41:2.10+dfsg-0ubuntu51:2.11+dfsg-1ubuntu11:2.11+dfsg-1ubuntu2
Show 31 moreShow less
1:2.11+dfsg-1ubuntu41:2.11+dfsg-1ubuntu51:2.11+dfsg-1ubuntu61:2.11+dfsg-1ubuntu71:2.11+dfsg-1ubuntu7.11:2.11+dfsg-1ubuntu7.21:2.11+dfsg-1ubuntu7.31:2.11+dfsg-1ubuntu7.41:2.11+dfsg-1ubuntu7.51:2.11+dfsg-1ubuntu7.61:2.11+dfsg-1ubuntu7.71:2.11+dfsg-1ubuntu7.81:2.11+dfsg-1ubuntu7.91:2.11+dfsg-1ubuntu7.101:2.11+dfsg-1ubuntu7.121:2.11+dfsg-1ubuntu7.131:2.11+dfsg-1ubuntu7.141:2.11+dfsg-1ubuntu7.151:2.11+dfsg-1ubuntu7.171:2.11+dfsg-1ubuntu7.181:2.11+dfsg-1ubuntu7.191:2.11+dfsg-1ubuntu7.201:2.11+dfsg-1ubuntu7.211:2.11+dfsg-1ubuntu7.221:2.11+dfsg-1ubuntu7.231:2.11+dfsg-1ubuntu7.251:2.11+dfsg-1ubuntu7.261:2.11+dfsg-1ubuntu7.271:2.11+dfsg-1ubuntu7.281:2.11+dfsg-1ubuntu7.291:2.11+dfsg-1ubuntu7.31
1:2.11+dfsg-1ubuntu7.32
qemu
Ubuntu:20.04:LTS
 before 1:4.2-3ubuntu6.6, plus listed versions
1:4.0+dfsg-0ubuntu91:4.0+dfsg-0ubuntu101:4.2-1ubuntu11:4.2-1ubuntu21:4.2-3ubuntu1
Show 10 moreShow less
1:4.2-3ubuntu21:4.2-3ubuntu31:4.2-3ubuntu41:4.2-3ubuntu51:4.2-3ubuntu61:4.2-3ubuntu6.11:4.2-3ubuntu6.21:4.2-3ubuntu6.31:4.2-3ubuntu6.41:4.2-3ubuntu6.5
1:4.2-3ubuntu6.6
qemu
Ubuntu:Pro:14.04:LTS
From an advisory covering 6 CVEs
 before 2.0.0+dfsg-2ubuntu1.47+esm1, plus listed versions
1.5.0+dfsg-3ubuntu51.5.0+dfsg-3ubuntu61.6.0+dfsg-2ubuntu11.6.0+dfsg-2ubuntu21.6.0+dfsg-2ubuntu3
Show 45 moreShow less
1.6.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu11.7.0+dfsg-2ubuntu21.7.0+dfsg-2ubuntu31.7.0+dfsg-2ubuntu41.7.0+dfsg-2ubuntu51.7.0+dfsg-2ubuntu71.7.0+dfsg-2ubuntu81.7.0+dfsg-2ubuntu91.7.0+dfsg-3ubuntu1~ppa11.7.0+dfsg-3ubuntu11.7.0+dfsg-3ubuntu21.7.0+dfsg-3ubuntu31.7.0+dfsg-3ubuntu41.7.0+dfsg-3ubuntu51.7.0+dfsg-3ubuntu61.7.0+dfsg-3ubuntu72.0.0~rc1+dfsg-0ubuntu12.0.0~rc1+dfsg-0ubuntu22.0.0~rc1+dfsg-0ubuntu32.0.0~rc1+dfsg-0ubuntu3.12.0.0+dfsg-2ubuntu12.0.0+dfsg-2ubuntu1.12.0.0+dfsg-2ubuntu1.22.0.0+dfsg-2ubuntu1.32.0.0+dfsg-2ubuntu1.52.0.0+dfsg-2ubuntu1.62.0.0+dfsg-2ubuntu1.72.0.0+dfsg-2ubuntu1.82.0.0+dfsg-2ubuntu1.92.0.0+dfsg-2ubuntu1.102.0.0+dfsg-2ubuntu1.112.0.0+dfsg-2ubuntu1.132.0.0+dfsg-2ubuntu1.142.0.0+dfsg-2ubuntu1.152.0.0+dfsg-2ubuntu1.162.0.0+dfsg-2ubuntu1.172.0.0+dfsg-2ubuntu1.182.0.0+dfsg-2ubuntu1.192.0.0+dfsg-2ubuntu1.202.0.0+dfsg-2ubuntu1.212.0.0+dfsg-2ubuntu1.222.0.0+dfsg-2ubuntu1.242.0.0+dfsg-2ubuntu1.252.0.0+dfsg-2ubuntu1.26
2.0.0+dfsg-2ubuntu1.47+esm1
qemu
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 4.2.1-lp152.9.6.1
4.2.1-lp152.9.6.1
qemu-linux-user
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 4.2.1-lp152.9.6.1
4.2.1-lp152.9.6.1
qemu-testsuite
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 4.2.1-lp152.9.6.1
4.2.1-lp152.9.6.1
qemu
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
 before 4.2.1-lp152.9.16.2
4.2.1-lp152.9.16.2
qemu-linux-user
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
 before 4.2.1-lp152.9.16.1
4.2.1-lp152.9.16.1
qemu-testsuite
openSUSE:Leap 15.2
From an advisory covering 14 CVEs
 before 4.2.1-lp152.9.16.7
4.2.1-lp152.9.16.7
qemu
openSUSE:Leap 15.3
From an advisory covering 14 CVEs
 before 5.2.0-17.1
5.2.0-17.1
qemu
openSUSE:Tumbleweed
From an advisory covering 135 CVEs
 before 6.1.0-32.1
6.1.0-32.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubgejian-iscas/CVE-2020-143642021-04-20
PoC in GitHuby-f00l/CVE-2020-143642021-08-13

History

History
RecordedChangedSources
affected, facts
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-14364 is a medium vulnerability (CVSS 5.0) in Qemu, published August 24, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.40%, the 92nd percentile. Fixed in qemu 5.0.0-r2.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,087 package rows, 45 versions, 191 references and the rest of 1 source description. The JSON record has them. Also not on the record: 29 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 9 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open