Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 486
Alerts This Week
Warning Icon 1 486

SUSE: 2021:2428-1 Moderate QEMU Update Fixing Information Disclosure

suse
Calendar Grey July 21, 2021
Dist Suse Esm H88
SUSE: Security Patch for QEMU tackles five security flaws listed in the SUSE-SU-2021:2430-1 notice, assessed as moderate.
An update that fixes 5 vulnerabilities is now available

Summary

This update for qemu fixes the following issues: - CVE-2021-3595: Fixed an invalid pointer initialization may lead to information disclosure (tftp). (bsc#1187366) - CVE-2021-3592: Fixed an invalid pointer initialization may lead to information disclosure (bootp). (bsc#1187364) - CVE-2021-3594: Fixed an invalid pointer initialization may lead to information disclosure (udp). (bsc#1187367) - CVE-2021-3593: Fixed an invalid pointer initialization may lead to information disclosure (udp6). (bsc#1187365) - CVE-2021-3611: Fixed a segmentation fault due to stack overflow. (bsc#1187529) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

Topics%20covered

Topics Covered

security advisory moderate security fix information disclosure SUSE stack overflow QEMU

References

#1187364 #1187365 #1187366 #1187367 #1187529

Cross- CVE-2021-3592 CVE-2021-3593 CVE-2021-3594

CVE-2021-3595 CVE-2021-3611

CVSS scores:

CVE-2021-3592 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3592 (SUSE): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3593 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3593 (SUSE): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3594 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3594 (SUSE): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3595 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CVE-2021-3595 (SUSE): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Announcement ID: SUSE-SU-2021:2428-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security fix information disclosure SUSE stack overflow QEMU

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.