Test ID:	1.3.6.1.4.1.25623.1.0.844544
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4467-1)
Summary:	The remote host is missing an update for the 'qemu' package(s) announced via the USN-4467-1 advisory.
Description:	Summary: The remote host is missing an update for the 'qemu' package(s) announced via the USN-4467-1 advisory. Vulnerability Insight: Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP echo requests. An attacker inside a guest could possibly use this issue to leak host memory to obtain sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-10756) Eric Blake and Xueqiang Wei discovered that the QEMU NDB implementation incorrectly handled certain requests. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-10761) Ziming Zhang discovered that the QEMU SM501 graphics driver incorrectly handled certain operations. An attacker inside a guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-12829) It was discovered that the QEMU SD memory card implementation incorrectly handled certain memory operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13253) Ren Ding and Hanqing Zhao discovered that the QEMU ES1370 audio driver incorrectly handled certain invalid frame counts. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13361) Ren Ding and Hanqing Zhao discovered that the QEMU MegaRAID SAS SCSI driver incorrectly handled certain memory operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13362) Alexander Bulekov discovered that QEMU MegaRAID SAS SCSI driver incorrectly handled certain memory space operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13659) Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko discovered that the QEMU incorrectly handled certain msi-x mmio operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13754) It was discovered that QEMU incorrectly handled certain memory copy operations when loading ROM contents. If a user were tricked into running an untrusted kernel image, a remote attacker could possibly use this issue to run arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-13765) Ren Ding, Hanqing Zhao, and Yi Ren discovered that the QEMU ATI video driver incorrectly handled certain index values. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-13800) Ziming Zhang discovered that the QEMU OSS audio driver incorrectly handled certain operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'qemu' package(s) on Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10756 Debian Security Information: DSA-4728 (Google Search) https://www.debian.org/security/2020/dsa-4728 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JYTZ32P67PZER6P7TW6FQK3SZRKQLVEI/ https://www.zerodayinitiative.com/advisories/ZDI-20-1005/ https://bugzilla.redhat.com/show_bug.cgi?id=1835986 https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html SuSE Security Announcement: openSUSE-SU-2020:0987 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00035.html SuSE Security Announcement: openSUSE-SU-2020:0994 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00040.html https://usn.ubuntu.com/4437-1/ https://usn.ubuntu.com/4467-1/ Common Vulnerability Exposure (CVE) ID: CVE-2020-10761 https://security.gentoo.org/glsa/202011-09 https://www.openwall.com/lists/oss-security/2020/06/09/1 SuSE Security Announcement: openSUSE-SU-2020:1108 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html Common Vulnerability Exposure (CVE) ID: CVE-2020-12829 Debian Security Information: DSA-4760 (Google Search) https://www.debian.org/security/2020/dsa-4760 https://bugzilla.redhat.com/show_bug.cgi?id=1808510 Common Vulnerability Exposure (CVE) ID: CVE-2020-13253 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg05835.html https://lists.debian.org/debian-lts-announce/2020/09/msg00013.html https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2020-13361 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html https://security-tracker.debian.org/tracker/CVE-2020-13361 https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html Common Vulnerability Exposure (CVE) ID: CVE-2020-13362 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html https://security-tracker.debian.org/tracker/CVE-2020-13362 Common Vulnerability Exposure (CVE) ID: CVE-2020-13659 https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg07313.html Common Vulnerability Exposure (CVE) ID: CVE-2020-13754 https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00004.html http://www.openwall.com/lists/oss-security/2020/06/15/8 Common Vulnerability Exposure (CVE) ID: CVE-2020-13765 https://git.qemu.org/?p=qemu.git;a=commit;h=e423455c4f23a1a828901c78fe6d03b7dde79319 https://github.com/qemu/qemu/commit/4f1c6cb2f9afafda05eab150fd2bd284edce6676 Common Vulnerability Exposure (CVE) ID: CVE-2020-13800 https://cve.openeuler.org/cve#/CVEInfo/CVE-2020-13800 https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg00825.html Common Vulnerability Exposure (CVE) ID: CVE-2020-14415 Common Vulnerability Exposure (CVE) ID: CVE-2020-15863 https://security.gentoo.org/glsa/202208-27 https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg03497.html https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg05745.html SuSE Security Announcement: openSUSE-SU-2020:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00024.html Common Vulnerability Exposure (CVE) ID: CVE-2020-16092 http://www.openwall.com/lists/oss-security/2020/08/10/1 https://lists.nongnu.org/archive/html/qemu-devel/2020-07/msg07563.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.