Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Debian 8: DLA-2090-1 Critical: QEMU Buffer Overflow Security Issue

debian lts
Calendar Grey January 30, 2020
Dist Debian Esm H88
A critical vulnerability in QEMU 4.2.0 affects memory management, risking buffer overflows and DoS attacks. Upgrading to a later version is strongly advised.
tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanag es memory, as demonstrated by IRC DCC commands in EMU_IRC

Summary

For Debian 8 "Jessie", this problem has been fixed in version
1:2.1+dfsg-12+deb8u13.

We recommend that you upgrade your qemu packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Best,
Utkarsh


Severity
critical
Lowest
Low
Medium
High
Critical

Package: qemu
Version: 1:2.1+dfsg-12+deb8u13
CVE ID: CVE-2020-7039
Debian Bug: 949085

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here