Test ID:	1.3.6.1.4.1.25623.1.0.892560
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-2560-1)
Summary:	The remote host is missing an update for the Debian 'qemu' package(s) announced via the DLA-2560-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'qemu' package(s) announced via the DLA-2560-1 advisory. Vulnerability Insight: Several vulnerabilities were discovered in QEMU, a fast processor emulator (notably used in KVM and Xen HVM virtualization). An attacker could trigger a denial-of-service (DoS), information leak, and possibly execute arbitrary code with the privileges of the QEMU process on the host. CVE-2020-15469 A MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CVE-2020-15859 QEMU has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. CVE-2020-25084 QEMU has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked. CVE-2020-28916 hw/net/e1000e_core.c has an infinite loop via an RX descriptor with a NULL buffer address. CVE-2020-29130 slirp.c has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29443 ide_atapi_cmd_reply_end in hw/ide/atapi.c allows out-of-bounds read access because a buffer index is not validated. CVE-2021-20181 9pfs: ZDI-CAN-10904: QEMU Plan 9 file system TOCTOU privilege escalation vulnerability. CVE-2021-20221 aarch64: GIC: out-of-bound heap buffer access via an interrupt ID field. For Debian 9 stretch, these problems have been fixed in version 1:2.8+dfsg-6+deb9u13. We recommend that you upgrade your qemu packages. For the detailed security status of qemu please refer to its security tracker page at: [link moved to references] Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'qemu' package(s) on Debian 9. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-15469 https://lists.gnu.org/archive/html/qemu-devel/2020-06/msg09961.html https://lists.debian.org/debian-lts-announce/2021/02/msg00024.html https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html Common Vulnerability Exposure (CVE) ID: CVE-2020-15859 https://security.gentoo.org/glsa/202208-27 https://bugs.launchpad.net/qemu/+bug/1886362 https://lists.gnu.org/archive/html/qemu-devel/2020-07/msg05304.html https://www.openwall.com/lists/oss-security/2020/07/21/3 Common Vulnerability Exposure (CVE) ID: CVE-2020-25084 https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html Common Vulnerability Exposure (CVE) ID: CVE-2020-28916 https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg03185.html Common Vulnerability Exposure (CVE) ID: CVE-2020-29130 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/45S5IHSWYITJKMRT23HCHJQDI674AMTQ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OPCOHDEONMHH6QPJZKRLLCNRGRYODG7X/ https://lists.freedesktop.org/archives/slirp/2020-November/000115.html https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html http://www.openwall.com/lists/oss-security/2020/11/27/1 Common Vulnerability Exposure (CVE) ID: CVE-2020-29443 http://www.openwall.com/lists/oss-security/2021/01/18/2 https://lists.nongnu.org/archive/html/qemu-devel/2020-11/msg04685.html Common Vulnerability Exposure (CVE) ID: CVE-2021-20181 [debian-lts-announce] 20210218 [SECURITY] [DLA 2560-1] qemu security update [debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update https://bugzilla.redhat.com/show_bug.cgi?id=1927007 https://security.netapp.com/advisory/ntap-20210720-0009/ https://www.zerodayinitiative.com/advisories/ZDI-21-159/ Common Vulnerability Exposure (CVE) ID: CVE-2021-20221 [oss-security] 20210205 CVE-2021-20221 QEMU: aarch64: GIC: out-of-bound heap buffer access via an interrupt ID field http://www.openwall.com/lists/oss-security/2021/02/05/1 https://bugzilla.redhat.com/show_bug.cgi?id=1924601 https://security.netapp.com/advisory/ntap-20210708-0005/
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.