Test Kennung:	1.3.6.1.4.1.25623.1.0.856105
Kategorie:	openSUSE Local Security Checks
Titel:	openSUSE Security Advisory (SUSE-SU-2024:1438-1)
Zusammenfassung:	The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2024:1438-1 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2024:1438-1 advisory. Vulnerability Insight: This update for qemu fixes the following issues: - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-3446: Fixed DMA reentrancy issue leads to double free vulnerability (bsc#1222843) - CVE-2023-3019: Fixed heap use-after-free in e1000e_write_packet_to_guest() (bsc#1213269) Affected Software/OS: 'qemu' package(s) on openSUSE Leap 15.5. Solution: Please install the updated package(s). CVSS Score: 6.5 CVSS Vector: AV:L/AC:L/Au:M/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-3019 RHBZ#2222351 https://bugzilla.redhat.com/show_bug.cgi?id=2222351 RHSA-2024:0135 https://access.redhat.com/errata/RHSA-2024:0135 RHSA-2024:0404 https://access.redhat.com/errata/RHSA-2024:0404 RHSA-2024:0569 https://access.redhat.com/errata/RHSA-2024:0569 RHSA-2024:2135 https://access.redhat.com/errata/RHSA-2024:2135 https://access.redhat.com/security/cve/CVE-2023-3019 https://security.netapp.com/advisory/ntap-20230831-0005/ Common Vulnerability Exposure (CVE) ID: CVE-2023-6683 RHBZ#2254825 https://bugzilla.redhat.com/show_bug.cgi?id=2254825 RHSA-2024:2962 https://access.redhat.com/errata/RHSA-2024:2962 https://access.redhat.com/security/cve/CVE-2023-6683 https://security.netapp.com/advisory/ntap-20240223-0001/ Common Vulnerability Exposure (CVE) ID: CVE-2024-3446 RHBZ#2274211 https://bugzilla.redhat.com/show_bug.cgi?id=2274211 https://access.redhat.com/security/cve/CVE-2024-3446 https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/ Common Vulnerability Exposure (CVE) ID: CVE-2024-3447
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.