Ubuntu 20.04 QEMU Critical Denial of Service Vuln USN-8412-1
ubuntu
June 9, 2026
Several security issues were fixed in QEMU.
Summary
Several security issues were fixed in QEMU.
Software Description:
- qemu: Machine emulator and virtualizer
Details:
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the
iSCSI block driver in QEMU incorrectly handled certain responses from an
iSCSI server. A remote attacker could possibly use this issue to cause QEMU
to crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711)
It was discovered that the iSCSI block driver in QEMU incorrectly handled
certain memory operations, leading to a heap-based buffer over-read. An
attacker could possibly use this issue to expose sensitive information from
the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947)
Ziming Zhang discovered that the SM501 display driver in QEMU contained an
integer overflow. A local attacker could possibly use this issue to cause
QEMU to crash, resulting in a denial of service. This issue only affected
...
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
qemu 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-block-extra 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-guest-agent 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-kvm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-arm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-common 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-data 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-gui 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-mips 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-misc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-ppc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-s390x 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-sparc 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86-microvm 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-system-x86-xen 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user-binfmt 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-user-static 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
qemu-utils 1:4.2-3ubuntu6.30+esm1
Available with Ubuntu Pro
Ubuntu 18.04 LTS
qemu 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-block-extra 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-guest-agent 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-kvm 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-arm 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-common 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-mips 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-misc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-ppc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-s390x 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-sparc 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-system-x86 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-user-static 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
qemu-utils 1:2.11+dfsg-1ubuntu7.42+esm5
Available with Ubuntu Pro
Ubuntu 16.04 LTS
qemu 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-block-extra 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-guest-agent 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-kvm 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-arm 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-common 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-mips 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-misc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-system-x86 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user-binfmt 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-user-static 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
qemu-utils 1:2.5+dfsg-5ubuntu10.51+esm4
Available with Ubuntu Pro
Ubuntu 14.04 LTS
qemu 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-common 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-guest-agent 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-keymaps 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-kvm 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-aarch64 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-arm 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-common 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-mips 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-misc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-ppc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-sparc 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-system-x86 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-user 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-user-static 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
qemu-utils 2.0.0+dfsg-2ubuntu1.47+esm6
Available with Ubuntu Pro
After a standard system update you need to restart all QEMU virtual
machines to make all the necessary changes.References
https://ubuntu.com/security/notices/USN-8412-1
CVE-2020-11947, CVE-2020-12829, CVE-2020-14394, CVE-2020-15469,
CVE-2020-15859, CVE-2020-15863, CVE-2020-1711, CVE-2020-17380,
CVE-2020-25084, CVE-2020-25624, CVE-2020-25625, CVE-2020-25723,
CVE-2020-27617, CVE-2020-29443, CVE-2020-35504, CVE-2020-35505,
CVE-2021-20181, CVE-2021-20196, CVE-2021-20203, CVE-2021-20221,
CVE-2021-20257, CVE-2021-3409, CVE-2021-3416, CVE-2021-3507,
CVE-2021-3527, CVE-2021-4206, CVE-2021-4207, CVE-2023-2861,
CVE-2023-3180, CVE-2023-3354, CVE-2023-5088, CVE-2024-3446,
CVE-2024-3447, CVE-2024-4467, CVE-2024-6519, CVE-2024-7409,
CVE-2024-8354, CVE-2025-11234, CVE-2026-2243
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-8412-1
Topics Covered
Package Information
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!