{"id":"CVE-2019-12068","aliases":["BELL-CVE-2019-12068","DEBIAN-CVE-2019-12068","DLA-1927-1","DLA-2288-1","DSA-4665-1","EUVD-2019-3721","GHSA-4699-632x-4vxr","SUSE-SU-2019:14199-1","SUSE-SU-2019:14201-1","SUSE-SU-2019:2753-1","SUSE-SU-2019:2769-1","SUSE-SU-2019:2783-1","SUSE-SU-2019:2954-1","SUSE-SU-2019:2955-1","SUSE-SU-2019:2956-1","SUSE-SU-2020:0388-1","SUSE-SU-2020:14396-1","SUSE-SU-2020:1514-1","SUSE-SU-2020:1526-1","SUSE-SU-2020:1538-1","SUSE-SU-2021:14706-1","UBUNTU-CVE-2019-12068","USN-4191-1","USN-4191-2","openSUSE-SU-2019:2505-1","openSUSE-SU-2019:2510-1"],"status":"published","title":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","severity":{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0051,"percentile":0.44026,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2019-09-20T00:00:00Z","modified":"2026-09-21T07:01:44Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:4.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:4.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:4.1-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","fixed_in":["2.0.0+dfsg-2ubuntu1.47"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"qemu","fixed_in":["1:2.5+dfsg-5ubuntu10.42"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"qemu","fixed_in":["1:2.11+dfsg-1ubuntu7.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"qemu","fixed_in":["1:4.2-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1+dfsg-12+deb8u12"}]}],"versions":["1:2.1+dfsg-11","1:2.1+dfsg-12","1:2.1+dfsg-12+deb8u1","1:2.1+dfsg-12+deb8u10","1:2.1+dfsg-12+deb8u11","1:2.1+dfsg-12+deb8u2","1:2.1+dfsg-12+deb8u3","1:2.1+dfsg-12+deb8u4","1:2.1+dfsg-12+deb8u4~bpo70+1","1:2.1+dfsg-12+deb8u5","1:2.1+dfsg-12+deb8u5a","1:2.1+dfsg-12+deb8u5a~bpo70+1","1:2.1+dfsg-12+deb8u6","1:2.1+dfsg-12+deb8u7","1:2.1+dfsg-12+deb8u8","1:2.1+dfsg-12+deb8u9","1:2.1+dfsg-12~bpo70+1"],"bundled":8},{"source":"osv","ecosystem":"Debian:9","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.8+dfsg-6+deb9u10"}]}],"versions":["1:2.8+dfsg-6","1:2.8+dfsg-6+deb9u1","1:2.8+dfsg-6+deb9u2","1:2.8+dfsg-6+deb9u3","1:2.8+dfsg-6+deb9u4","1:2.8+dfsg-6+deb9u5","1:2.8+dfsg-6+deb9u6","1:2.8+dfsg-6+deb9u7","1:2.8+dfsg-6+deb9u8","1:2.8+dfsg-6+deb9u9"],"bundled":13},{"source":"osv","ecosystem":"Debian:10","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-8+deb10u5"}]}],"versions":["1:3.1+dfsg-8","1:3.1+dfsg-8+deb10u2","1:3.1+dfsg-8+deb10u3","1:3.1+dfsg-8+deb10u4","1:3.1+dfsg-8~deb10u1"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_40-61.49.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_21-45.33.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2_02-2.14.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2_02-2.14.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2_02-2.14.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.2_02-2.14.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_04-3.56.2"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_06-43.54.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_06-43.54.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_06-43.54.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_06-43.54.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_06-43.54.2"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-9.33.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.6.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-9.6.2"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.23.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.23.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-5.23.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_28-22.64.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_28-22.64.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-60.31.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-33.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-33.29.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-41.59.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-41.59.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-41.59.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-41.59.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.1-6.44.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2-53.38.1"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-2ubuntu1.47"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2","2.0.0+dfsg-2ubuntu1.3","2.0.0+dfsg-2ubuntu1.5","2.0.0+dfsg-2ubuntu1.6","2.0.0+dfsg-2ubuntu1.7","2.0.0+dfsg-2ubuntu1.8","2.0.0+dfsg-2ubuntu1.9","2.0.0+dfsg-2ubuntu1.10","2.0.0+dfsg-2ubuntu1.11","2.0.0+dfsg-2ubuntu1.13","2.0.0+dfsg-2ubuntu1.14","2.0.0+dfsg-2ubuntu1.15","2.0.0+dfsg-2ubuntu1.16","2.0.0+dfsg-2ubuntu1.17","2.0.0+dfsg-2ubuntu1.18","2.0.0+dfsg-2ubuntu1.19","2.0.0+dfsg-2ubuntu1.20","2.0.0+dfsg-2ubuntu1.21","2.0.0+dfsg-2ubuntu1.22","2.0.0+dfsg-2ubuntu1.24","2.0.0+dfsg-2ubuntu1.25","2.0.0+dfsg-2ubuntu1.26","2.0.0+dfsg-2ubuntu1.27","2.0.0+dfsg-2ubuntu1.28","2.0.0+dfsg-2ubuntu1.29","2.0.0+dfsg-2ubuntu1.30","2.0.0+dfsg-2ubuntu1.31","2.0.0+dfsg-2ubuntu1.32","2.0.0+dfsg-2ubuntu1.33","2.0.0+dfsg-2ubuntu1.34","2.0.0+dfsg-2ubuntu1.35","2.0.0+dfsg-2ubuntu1.36","2.0.0+dfsg-2ubuntu1.38","2.0.0+dfsg-2ubuntu1.39","2.0.0+dfsg-2ubuntu1.40","2.0.0+dfsg-2ubuntu1.41","2.0.0+dfsg-2ubuntu1.42","2.0.0+dfsg-2ubuntu1.43","2.0.0+dfsg-2ubuntu1.44","2.0.0+dfsg-2ubuntu1.45","2.0.0+dfsg-2ubuntu1.46"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.5+dfsg-5ubuntu10.42"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.11+dfsg-1ubuntu7.20"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2-1ubuntu1"}]}],"versions":["1:4.0+dfsg-0ubuntu9","1:4.0+dfsg-0ubuntu10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.5+dfsg-5ubuntu10.42"}]}],"versions":["1:2.3+dfsg-5ubuntu9","1:2.3+dfsg-5ubuntu10","1:2.4+dfsg-4ubuntu1","1:2.4+dfsg-4ubuntu2","1:2.4+dfsg-4ubuntu3","1:2.4+dfsg-5ubuntu3","1:2.5+dfsg-1ubuntu2","1:2.5+dfsg-1ubuntu3","1:2.5+dfsg-1ubuntu4","1:2.5+dfsg-1ubuntu5","1:2.5+dfsg-5ubuntu1","1:2.5+dfsg-5ubuntu2","1:2.5+dfsg-5ubuntu4","1:2.5+dfsg-5ubuntu6","1:2.5+dfsg-5ubuntu7","1:2.5+dfsg-5ubuntu10","1:2.5+dfsg-5ubuntu10.1","1:2.5+dfsg-5ubuntu10.2","1:2.5+dfsg-5ubuntu10.3","1:2.5+dfsg-5ubuntu10.4","1:2.5+dfsg-5ubuntu10.5","1:2.5+dfsg-5ubuntu10.6","1:2.5+dfsg-5ubuntu10.7","1:2.5+dfsg-5ubuntu10.8","1:2.5+dfsg-5ubuntu10.9","1:2.5+dfsg-5ubuntu10.10","1:2.5+dfsg-5ubuntu10.11","1:2.5+dfsg-5ubuntu10.13","1:2.5+dfsg-5ubuntu10.14","1:2.5+dfsg-5ubuntu10.15","1:2.5+dfsg-5ubuntu10.16","1:2.5+dfsg-5ubuntu10.20","1:2.5+dfsg-5ubuntu10.21","1:2.5+dfsg-5ubuntu10.22","1:2.5+dfsg-5ubuntu10.24","1:2.5+dfsg-5ubuntu10.25","1:2.5+dfsg-5ubuntu10.26","1:2.5+dfsg-5ubuntu10.28","1:2.5+dfsg-5ubuntu10.29","1:2.5+dfsg-5ubuntu10.30","1:2.5+dfsg-5ubuntu10.31","1:2.5+dfsg-5ubuntu10.32","1:2.5+dfsg-5ubuntu10.33","1:2.5+dfsg-5ubuntu10.34","1:2.5+dfsg-5ubuntu10.35","1:2.5+dfsg-5ubuntu10.36","1:2.5+dfsg-5ubuntu10.37","1:2.5+dfsg-5ubuntu10.38","1:2.5+dfsg-5ubuntu10.39","1:2.5+dfsg-5ubuntu10.40","1:2.5+dfsg-5ubuntu10.41"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.11+dfsg-1ubuntu7.20"}]}],"versions":["1:2.10+dfsg-0ubuntu3","1:2.10+dfsg-0ubuntu4","1:2.10+dfsg-0ubuntu5","1:2.11+dfsg-1ubuntu1","1:2.11+dfsg-1ubuntu2","1:2.11+dfsg-1ubuntu4","1:2.11+dfsg-1ubuntu5","1:2.11+dfsg-1ubuntu6","1:2.11+dfsg-1ubuntu7","1:2.11+dfsg-1ubuntu7.1","1:2.11+dfsg-1ubuntu7.2","1:2.11+dfsg-1ubuntu7.3","1:2.11+dfsg-1ubuntu7.4","1:2.11+dfsg-1ubuntu7.5","1:2.11+dfsg-1ubuntu7.6","1:2.11+dfsg-1ubuntu7.7","1:2.11+dfsg-1ubuntu7.8","1:2.11+dfsg-1ubuntu7.9","1:2.11+dfsg-1ubuntu7.10","1:2.11+dfsg-1ubuntu7.12","1:2.11+dfsg-1ubuntu7.13","1:2.11+dfsg-1ubuntu7.14","1:2.11+dfsg-1ubuntu7.15","1:2.11+dfsg-1ubuntu7.17","1:2.11+dfsg-1ubuntu7.18","1:2.11+dfsg-1ubuntu7.19"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0+dfsg-2ubuntu1.47"}]}],"versions":["1.5.0+dfsg-3ubuntu5","1.5.0+dfsg-3ubuntu6","1.6.0+dfsg-2ubuntu1","1.6.0+dfsg-2ubuntu2","1.6.0+dfsg-2ubuntu3","1.6.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu1","1.7.0+dfsg-2ubuntu2","1.7.0+dfsg-2ubuntu3","1.7.0+dfsg-2ubuntu4","1.7.0+dfsg-2ubuntu5","1.7.0+dfsg-2ubuntu7","1.7.0+dfsg-2ubuntu8","1.7.0+dfsg-2ubuntu9","1.7.0+dfsg-3ubuntu1~ppa1","1.7.0+dfsg-3ubuntu1","1.7.0+dfsg-3ubuntu2","1.7.0+dfsg-3ubuntu3","1.7.0+dfsg-3ubuntu4","1.7.0+dfsg-3ubuntu5","1.7.0+dfsg-3ubuntu6","1.7.0+dfsg-3ubuntu7","2.0.0~rc1+dfsg-0ubuntu1","2.0.0~rc1+dfsg-0ubuntu2","2.0.0~rc1+dfsg-0ubuntu3","2.0.0~rc1+dfsg-0ubuntu3.1","2.0.0+dfsg-2ubuntu1","2.0.0+dfsg-2ubuntu1.1","2.0.0+dfsg-2ubuntu1.2","2.0.0+dfsg-2ubuntu1.3","2.0.0+dfsg-2ubuntu1.5","2.0.0+dfsg-2ubuntu1.6","2.0.0+dfsg-2ubuntu1.7","2.0.0+dfsg-2ubuntu1.8","2.0.0+dfsg-2ubuntu1.9","2.0.0+dfsg-2ubuntu1.10","2.0.0+dfsg-2ubuntu1.11","2.0.0+dfsg-2ubuntu1.13","2.0.0+dfsg-2ubuntu1.14","2.0.0+dfsg-2ubuntu1.15","2.0.0+dfsg-2ubuntu1.16","2.0.0+dfsg-2ubuntu1.17","2.0.0+dfsg-2ubuntu1.18","2.0.0+dfsg-2ubuntu1.19","2.0.0+dfsg-2ubuntu1.20","2.0.0+dfsg-2ubuntu1.21","2.0.0+dfsg-2ubuntu1.22","2.0.0+dfsg-2ubuntu1.24","2.0.0+dfsg-2ubuntu1.25","2.0.0+dfsg-2ubuntu1.26","2.0.0+dfsg-2ubuntu1.27","2.0.0+dfsg-2ubuntu1.28","2.0.0+dfsg-2ubuntu1.29","2.0.0+dfsg-2ubuntu1.30","2.0.0+dfsg-2ubuntu1.31","2.0.0+dfsg-2ubuntu1.32","2.0.0+dfsg-2ubuntu1.33","2.0.0+dfsg-2ubuntu1.34","2.0.0+dfsg-2ubuntu1.35","2.0.0+dfsg-2ubuntu1.36","2.0.0+dfsg-2ubuntu1.38","2.0.0+dfsg-2ubuntu1.39","2.0.0+dfsg-2ubuntu1.40","2.0.0+dfsg-2ubuntu1.41","2.0.0+dfsg-2ubuntu1.42","2.0.0+dfsg-2ubuntu1.43","2.0.0+dfsg-2ubuntu1.44","2.0.0+dfsg-2ubuntu1.45","2.0.0+dfsg-2ubuntu1.46"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-lp150.7.28.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-lp151.7.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"qemu-linux-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1.1-lp151.7.6.1"}]}],"bundled":6}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"qemu","product":"qemu"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01518.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=de594e47659029316bbf9391efb79da0a1a08e08","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12068","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4191-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00034.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00038.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4191-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4665","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12068"},{"url":"https://git.qemu.org/?p=qemu.git;a=commit;h=de594e47659029316bbf9391efb79da0a1a08e08"},{"url":"https://usn.ubuntu.com/4191-1"},{"url":"https://usn.ubuntu.com/4191-2"},{"url":"https://github.com/advisories/GHSA-4699-632x-4vxr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-12068","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914199-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1126140","tags":["report"]},{"url":"https://bugzilla.suse.com/1126141","tags":["report"]},{"url":"https://bugzilla.suse.com/1126192","tags":["report"]},{"url":"https://bugzilla.suse.com/1126195","tags":["report"]},{"url":"https://bugzilla.suse.com/1126196","tags":["report"]},{"url":"https://bugzilla.suse.com/1126198","tags":["report"]},{"url":"https://bugzilla.suse.com/1126201","tags":["report"]},{"url":"https://bugzilla.suse.com/1127400","tags":["report"]},{"url":"https://bugzilla.suse.com/1135905","tags":["report"]},{"url":"https://bugzilla.suse.com/1143797","tags":["report"]},{"url":"https://bugzilla.suse.com/1145652","tags":["report"]},{"url":"https://bugzilla.suse.com/1146874","tags":["report"]},{"url":"https://bugzilla.suse.com/1149813","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17347","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17348","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914201-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047675","tags":["report"]},{"url":"https://bugzilla.suse.com/1130680","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20815","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192753-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1111331","tags":["report"]},{"url":"https://bugzilla.suse.com/1126197","tags":["report"]},{"url":"https://bugzilla.suse.com/1129642","tags":["report"]},{"url":"https://bugzilla.suse.com/1131811","tags":["report"]},{"url":"https://bugzilla.suse.com/1137717","tags":["report"]},{"url":"https://bugzilla.suse.com/1138294","tags":["report"]},{"url":"https://bugzilla.suse.com/1145240","tags":["report"]},{"url":"https://bugzilla.suse.com/1145774","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17345","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133818","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192954-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1119991","tags":["report"]},{"url":"https://bugzilla.suse.com/1146873","tags":["report"]},{"url":"https://bugzilla.suse.com/1152506","tags":["report"]},{"url":"https://bugzilla.suse.com/1155812","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11135","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192955-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1079730","tags":["report"]},{"url":"https://bugzilla.suse.com/1098403","tags":["report"]},{"url":"https://bugzilla.suse.com/1111025","tags":["report"]},{"url":"https://bugzilla.suse.com/1117665","tags":["report"]},{"url":"https://bugzilla.suse.com/1143794","tags":["report"]},{"url":"https://bugzilla.suse.com/1144087","tags":["report"]},{"url":"https://bugzilla.suse.com/1145379","tags":["report"]},{"url":"https://bugzilla.suse.com/1145427","tags":["report"]},{"url":"https://bugzilla.suse.com/1145436","tags":["report"]},{"url":"https://bugzilla.suse.com/1149811","tags":["report"]},{"url":"https://bugzilla.suse.com/SLE-6132","tags":["report"]},{"url":"https://bugzilla.suse.com/SLE-6237","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192956-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153358","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200388-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1115045","tags":["report"]},{"url":"https://bugzilla.suse.com/1152497","tags":["report"]},{"url":"https://bugzilla.suse.com/1154448","tags":["report"]},{"url":"https://bugzilla.suse.com/1154456","tags":["report"]},{"url":"https://bugzilla.suse.com/1154458","tags":["report"]},{"url":"https://bugzilla.suse.com/1154461","tags":["report"]},{"url":"https://bugzilla.suse.com/1155945","tags":["report"]},{"url":"https://bugzilla.suse.com/1157888","tags":["report"]},{"url":"https://bugzilla.suse.com/1158003","tags":["report"]},{"url":"https://bugzilla.suse.com/1158004","tags":["report"]},{"url":"https://bugzilla.suse.com/1158005","tags":["report"]},{"url":"https://bugzilla.suse.com/1158006","tags":["report"]},{"url":"https://bugzilla.suse.com/1158007","tags":["report"]},{"url":"https://bugzilla.suse.com/1161181","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7211","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014396-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1123156","tags":["report"]},{"url":"https://bugzilla.suse.com/1161066","tags":["report"]},{"url":"https://bugzilla.suse.com/1163018","tags":["report"]},{"url":"https://bugzilla.suse.com/1170940","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-7039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8608","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201514-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1166240","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1711","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201526-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201538-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160024","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114706-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172383","tags":["report"]},{"url":"https://bugzilla.suse.com/1172384","tags":["report"]},{"url":"https://bugzilla.suse.com/1172385","tags":["report"]},{"url":"https://bugzilla.suse.com/1172478","tags":["report"]},{"url":"https://bugzilla.suse.com/1175441","tags":["report"]},{"url":"https://bugzilla.suse.com/1176673","tags":["report"]},{"url":"https://bugzilla.suse.com/1176682","tags":["report"]},{"url":"https://bugzilla.suse.com/1176684","tags":["report"]},{"url":"https://bugzilla.suse.com/1178934","tags":["report"]},{"url":"https://bugzilla.suse.com/1179467","tags":["report"]},{"url":"https://bugzilla.suse.com/1181108","tags":["report"]},{"url":"https://bugzilla.suse.com/1182137","tags":["report"]},{"url":"https://bugzilla.suse.com/1182425","tags":["report"]},{"url":"https://bugzilla.suse.com/1182577","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-12068","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4191-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4191-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-13164","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15890","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YGK33QVVCMOM3HRWRJ6FPIFV2JBB4XDB/#YGK33QVVCMOM3HRWRJ6FPIFV2JBB4XDB","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KGVFZGJMBR53343ITOTWO7YW2JVKGHDT/#KGVFZGJMBR53343ITOTWO7YW2JVKGHDT","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-12068","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T19:59:44Z","modified":"2024-08-04T23:10:30.158Z","updated_at":"2026-11-02T14:20:23.697579Z"}],"euvd":[{"id":"EUVD-2019-3721","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T19:59:44Z","modified":"2024-08-04T23:10:30Z","updated_at":"2026-11-03T02:40:47.406732Z"}],"ghsa":[{"id":"GHSA-4699-632x-4vxr","title":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8...","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2022-05-24T22:00:42Z","modified":"2024-04-04T03:07:00Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:56:13.784244Z"}],"nvd":[{"id":"CVE-2019-12068","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T20:15:11.747Z","modified":"2026-06-17T02:14:01.583Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:05:28.126831Z"}],"osv":[{"id":"BELL-CVE-2019-12068","title":"CVE-2019-12068 does not affect BellSoft software","status":"withdrawn","published":"2019-09-24T20:15:00Z","modified":"2026-01-26T09:45:39.722827Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-12068","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T20:15:11.747Z","modified":"2026-03-15T21:45:09.522659Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12068","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T20:15:11.747Z","modified":"2026-09-21T07:01:44.504825546Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"UBUNTU-CVE-2019-12068","description":"In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's-\u003edsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.","status":"published","published":"2019-09-24T20:15:00Z","modified":"2026-02-04T02:50:08.649422Z","cvss":[{"version":"3.1","score":3.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"DLA-1927-1","title":"qemu - security update","status":"published","published":"2019-09-20T00:00:00Z","modified":"2026-03-09T01:19:16.971573Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2288-1","title":"qemu - security update","status":"published","published":"2020-07-25T00:00:00Z","modified":"2026-03-09T01:19:20.838587Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4665-1","title":"qemu - security update","status":"published","published":"2020-04-27T00:00:00Z","modified":"2026-03-09T02:09:21.473715Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2019:2505-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15\n- Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991)\n- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873)\n- Expose taa-no 'feature', indicating CPU does not have the\n  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)\n- Expose pschange-mc-no 'feature', indicating CPU does not have\n  the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-14T05:54:23Z","modified":"2026-02-04T03:13:05.577504Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2510-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nqemu was updated to v3.1.1.1, a stable, bug-fix-only release, which\nincludes 2 fixes we already carry, as well as one additional use-\nafter-free fix in slirp. (CVE-2018-20126 bsc#1119991,\nCVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811\nrespectively)\n\nSecurity issues fixed:\n\n- CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873)\n- CVE-2019-11135: Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506)\n- CVE-2018-12207: Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (bsc#1117665)\n\nOther issues fixed:\n\n- Change how this bug gets fixed (bsc#1144087)\n- Disable file locking in the Xen PV disk backend to avoid locking\n  issues with PV domUs during migration. The issues triggered by\n  the locking can not be properly handled in libxl. The locking\n  introduced in qemu-2.10 was removed again in qemu-4.0.\n  (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774)\n- Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132)\n- Additional hardware instruction support for s390, also update\n  qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237)\n\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-11-14T06:31:05Z","modified":"2026-02-04T02:47:30.595941Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2019:14199-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator\n  which could have led to Denial of Service (bsc#1149813).\n- CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of \n  service (bsc#1146874).\n- CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU \n  emulator which could have led to execution of  arbitrary code with privileges of the \n  QEMU process (bsc#1143797).\n- CVE-2019-12067: Fixed a null pointer dereference which could have led to denial of service (bsc#1145652).\n- CVE-2019-12155: Fixed a null pointer dereference in QXL VGA card emulator of QEMU which\n  could have led to denial of service (bsc#1135905).\n  ","status":"published","published":"2019-10-24T11:23:17Z","modified":"2026-02-04T03:45:58.326397Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:14201-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator\n  which could have led to Denial of Service (bsc#1149813).\n- CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of \n  service (bsc#1146874).\n- CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU \n  emulator which could have led to execution of  arbitrary code with privileges of the \n  QEMU process (bsc#1143797).\n- CVE-2019-12067: Fixed a null pointer dereference which could have led to denial of service (bsc#1145652).\n- CVE-2019-12155: Fixed a null pointer dereference in QXL VGA card emulator of QEMU which\n  could have led to denial of service (bsc#1135905).\n- CVE-2018-20815: Fixed a heap buffer overflow while loading device tree blob (bsc#1130680).\n- CVE-2017-10806: Fixed a stack buffer overflow in debug logging (bsc#1047675).\n  ","status":"published","published":"2019-10-25T12:28:21Z","modified":"2026-02-04T04:32:52.013199Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2753-1","title":"Security update for xen","description":"This update for xen to version 4.11.2 fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator\n  which could have led to Denial of Service (bsc#1149813).\n- CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of \n  service (bsc#1146874).\n- CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU \n  emulator which could have led to execution of  arbitrary code with privileges of the \n  QEMU process (bsc#1143797).\n\nOther issues fixed: \n\n- Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above\n  (bsc#1137717).\n- Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774). \n- Fixed an issue where libxenlight could not create new domain (bsc#1131811).\n- Fixed an issue where attached pci devices were lost after reboot (bsc#1129642).\n- Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240).\n","status":"published","published":"2019-10-23T11:45:48Z","modified":"2026-02-04T03:34:49.387031Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2769-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\nSecurity issues fixed: \t  \n\n- CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator\n  which could have led to Denial of Service (bsc#1149813).\n- CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of \n  service (bsc#1146874).\n- CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU \n  emulator which could have led to execution of  arbitrary code with privileges of the \n  QEMU process (bsc#1143797).\n\nOther issue fixed: \n\n- Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818).\n ","status":"published","published":"2019-10-24T11:23:02Z","modified":"2026-02-04T02:32:59.16303Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2783-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\t  \n- CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator\n  which could have led to Denial of Service (bsc#1149813).\n- CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of \n  service (bsc#1146874).\n- CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU \n  emulator which could have led to execution of  arbitrary code with privileges of the \n  QEMU process (bsc#1143797).\n ","status":"published","published":"2019-10-25T12:28:11Z","modified":"2026-02-04T03:12:37.744857Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2954-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15\n- Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991)\n- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873)\n- Expose taa-no 'feature', indicating CPU does not have the\n  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)\n- Expose pschange-mc-no 'feature', indicating CPU does not have\n  the page size change machine check vulnerability (CVE-2018-12207 bsc#1155812)\n","status":"published","published":"2019-11-12T18:14:28Z","modified":"2026-02-04T03:52:20.177512Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2955-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nqemu was updated to v3.1.1.1, a stable, bug-fix-only release, which\nincludes 2 fixes we already carry, as well as one additional use-\nafter-free fix in slirp. (CVE-2018-20126 bsc#1119991,\nCVE-2019-14378 bsc#1143794, and CVE-2019-15890 bsc#1149811\nrespectively)\n\nSecurity issues fixed:\n\n- CVE-2019-12068: Fixed potential DOS in lsi scsi controller emulation (bsc#1146873)\n- CVE-2019-11135: Expose taa-no 'feature', indicating CPU does not have the TSX Async Abort vulnerability. (bsc#1152506)\n- CVE-2018-12207: Expose pschange-mc-no 'feature', indicating CPU does not have the page size change machine check vulnerability (bsc#1117665)\n\nOther issues fixed:\n\n- Change how this bug gets fixed (bsc#1144087)\n- Disable file locking in the Xen PV disk backend to avoid locking\n  issues with PV domUs during migration. The issues triggered by\n  the locking can not be properly handled in libxl. The locking\n  introduced in qemu-2.10 was removed again in qemu-4.0.\n  (bsc#1079730, bsc#1098403, bsc#1111025, bsc#1145427, bsc#1145774)\n- Feature support for vfio-ccw dasd ipl (bsc#1145379 jira-SLE-6132)\n- Additional hardware instruction support for s390, also update\n  qemu linux headers to 5.2-rc1 (bsc#1145436 jira-SLE-6237)\n\n","status":"published","published":"2019-11-12T18:14:55Z","modified":"2026-02-04T02:29:45.857578Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2956-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\n- Remove a backslash '\\' escape character from 80-qemu-ga.rules (bsc#1153358)\n  Unlike sles 15 or newer guests, The udev rule file of qemu guest agent in\n  sles 12 sp4 or newer guest only needs one escape character.\n\n- Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991)\n- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068\n  bsc#1146873)\n- Expose taa-no 'feature', indicating CPU does not have the\n  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)\n- Expose pschange-mc-no 'feature', indicating CPU does not have\n  the page size change machine check vulnerability (CVE-2018-12207\n  bsc#1155812)\n- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP4\n\n","status":"published","published":"2019-11-12T18:15:08Z","modified":"2025-05-02T04:07:39.951484Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0388-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2018-12207: Fixed a race condition where untrusted virtual machines could have been using the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional (bsc#1155945 XSA-304).\n- CVE-2018-19965: Fixed a DoS from attempting to use INVPCID with a non-canonical addresses (bsc#1115045 XSA-279).\n- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate side-channel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack. (bsc#1152497 XSA-305).\n- CVE-2019-12067: Fixed a null pointer dereference in QEMU AHCI (bsc#1145652).\n- CVE-2019-12068: Fixed an infinite loop while executing script (bsc#1146874).\n- CVE-2019-12155: Fixed a null pointer dereference while releasing spice resources (bsc#1135905).\n- CVE-2019-14378: Fixed a heap buffer overflow during packet reassembly in slirp networking implementation (bsc#1143797).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly (bsc#1149813).\n- CVE-2019-17340: Fixed grant table transfer issues on large hosts (XSA-284 bsc#1126140).\n- CVE-2019-17341: Fixed a race with pass-through device hotplug (XSA-285 bsc#1126141).\n- CVE-2019-17342: Fixed steal_page violating page_struct access discipline (XSA-287 bsc#1126192).\n- CVE-2019-17343: Fixed an inconsistent PV IOMMU discipline (XSA-288 bsc#1126195).\n- CVE-2019-17344: Fixed a missing preemption in x86 PV page table unvalidation (XSA-290 bsc#1126196).\n- CVE-2019-17347: Fixed a PV kernel context switch corruption (XSA-293 bsc#1126201).\n- CVE-2019-18420: Fixed a hypervisor crash that could be caused by malicious x86 PV guests, resulting in a denial of service (bsc#1154448 XSA-296).\n- CVE-2019-18421: Fixed a privilege escalation through malicious PV guest administrators (bsc#1154458 XSA-299).\n- CVE-2019-18424: Fixed a privilege escalation through DMA to physical devices by untrusted domains (bsc#1154461 XSA-302).  \n- CVE-2019-18425: Fixed a privilege escalation from 32-bit PV guest used mode (bsc#1154456 XSA-298).\n- CVE-2019-19577: Fixed an issue where a malicious guest administrator could have caused Xen to access data structures while they are being modified leading to a crash (bsc#1158007 XSA-311). \n- CVE-2019-19578: Fixed an issue where a malicious or buggy PV guest could have caused hypervisor crash resulting in denial of service affecting the entire host (bsc#1158005 XSA-309).\n- CVE-2019-19579: Fixed a privilege escalation where an untrusted domain with access to a physical device can DMA into host memory (bsc#1157888 XSA-306).\n- CVE-2019-19580: Fixed a privilege escalation where a malicious PV guest administrator could have been able to escalate their privilege to that of the host (bsc#1158006 XSA-310).\n- CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307).\n- CVE-2019-19583: Fixed improper checks which could have allowed HVM/PVH guest userspace code to crash the guest, leading to a guest denial of service (bsc#1158004 XSA-308).\n","status":"published","published":"2020-02-17T14:03:16Z","modified":"2026-02-04T02:19:31.700959Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:14396-1","title":"Security update for kvm","description":"This update for kvm fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873).\n- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).\n- CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018).\n- CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly in slirp (bsc#1149811).\n- Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156).\n","status":"published","published":"2020-06-11T13:23:22Z","modified":"2026-02-04T02:47:20.950274Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1514-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240).\n- CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873).\n- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).\n- CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018).\n- CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly in slirp (bsc#1149811).\n- Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156).\n","status":"published","published":"2020-06-02T08:14:29Z","modified":"2026-02-04T02:29:07.166823Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1526-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240).\n- CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873).\n- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).\n- CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018).\n- CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly in slirp (bsc#1149811).\n- Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156).\n","status":"published","published":"2020-06-03T10:04:37Z","modified":"2026-02-04T02:27:15.425356Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1538-1","title":"Security update for qemu","description":"This update for qemu fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240).\n- CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873).\n- CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940).\n- CVE-2020-8608: Fixed a potential OOB access in slirp (bsc#1163018).\n- CVE-2020-7039: Fixed a potential OOB access in slirp (bsc#1161066).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly in slirp (bsc#1149811).\n- Fixed multiple potential DoS issues in SLIRP, similar to CVE-2019-6778 (bsc#1123156).\n\nNon-security issue fixed:\n\n- Make sure that required memory is mapped properly during an incoming migration of a Xen HVM domU (bsc#1160024).\n","status":"published","published":"2020-06-04T10:59:37Z","modified":"2026-02-04T04:29:27.977063Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2021:14706-1","title":"Security update for kvm","description":"This update for kvm fixes the following issues:\n\n- Fix OOB read and write due to integer overflow in sm501_2d_operation() in hw/display/sm501.c (CVE-2020-12829, bsc#1172385)\n- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362 bsc#1172383)\n- Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934)\n- Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673)\n- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682)\n- Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684)\n- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)\n- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)\n- Fix OOB access in SLIRP ARP packet processing (CVE-2020-29130, bsc#1179467)\n- Fix OOB access while processing USB packets (CVE-2020-14364 bsc#1175441)\n- Fix potential privilege escalation in virtfs (CVE-2021-20181 bsc#1182137)\n- Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425)\n- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)\n- Fix for similar problems as for the original fix prompting this issue (CVE-2019-6778 bsc#1123156)\n- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018 CVE-2020-7039 bsc#1161066)\n- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)\n- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bsc#1146873)\n- Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361 bsc#1172384)\n- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)\n","status":"published","published":"2021-04-23T15:32:45Z","modified":"2026-02-04T02:56:04.771314Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4191-1","title":"qemu vulnerabilities","description":"It was discovered that the LSI SCSI adapter emulator implementation in QEMU\ndid not properly validate executed scripts. A local attacker could use this\nto cause a denial of service. (CVE-2019-12068)\n\nSergej Schumilo, Cornelius Aschermann and Simon Wörner discovered that the\nqxl paravirtual graphics driver implementation in QEMU contained a null\npointer dereference. A local attacker in a guest could use this to cause a\ndenial of service. (CVE-2019-12155)\n\nRiccardo Schirone discovered that the QEMU bridge helper did not properly\nvalidate network interface names. A local attacker could possibly use this\nto bypass ACL restrictions. (CVE-2019-13164)\n\nIt was discovered that a heap-based buffer overflow existed in the SLiRP\nnetworking implementation of QEMU. A local attacker in a guest could use\nthis to cause a denial of service or possibly execute arbitrary code in the\nhost. (CVE-2019-14378)\n\nIt was discovered that a use-after-free vulnerability existed in the SLiRP\nnetworking implementation of QEMU. A local attacker in a guest could use\nthis to cause a denial of service. (CVE-2019-15890)\n","status":"published","published":"2019-11-14T00:14:42Z","modified":"2026-04-27T15:48:43.0295916Z","updated_at":"2026-11-02T16:58:14.547547Z"},{"id":"USN-4191-2","title":"qemu vulnerabilities","description":"USN-4191-2 fixed a vulnerability in QEMU. This update provides the\ncorresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that the LSI SCSI adapter emulator implementation in QEMU\n did not properly validate executed scripts. A local attacker could use this\n to cause a denial of service. (CVE-2019-12068)\n\n Sergej Schumilo, Cornelius Aschermann and Simon Wörner discovered that the\n qxl paravirtual graphics driver implementation in QEMU contained a null\n pointer dereference. A local attacker in a guest could use this to cause a\n denial of service. (CVE-2019-12155)\n\n Riccardo Schirone discovered that the QEMU bridge helper did not properly\n validate network interface names. A local attacker could possibly use this\n to bypass ACL restrictions. (CVE-2019-13164)\n\n It was discovered that a heap-based buffer overflow existed in the SLiRP\n networking implementation of QEMU. A local attacker in a guest could use\n this to cause a denial of service or possibly execute arbitrary code in the\n host. (CVE-2019-14378)\n\n It was discovered that a use-after-free vulnerability existed in the SLiRP\n networking implementation of QEMU. A local attacker in a guest could use\n this to cause a denial of service. (CVE-2019-15890)\n","status":"published","published":"2019-11-14T00:25:35Z","modified":"2026-04-27T15:48:48.600116291Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}