CVE-2023-3019
Medium · 6.0CVSS
6.0
EPSS
0.3%
Published
Jul 24, 2023
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in virtual machine software can let someone inside one virtual machine crash the entire system running it.
- Exploitation
- Local Privilege
- Attacker needs
- High Privilege
- Complexity
- Moderate
- Impact
- Denial Of Service
- Component
- Application
- Class
- Use After Free
- Remediation
- Patch
- Effort
- Medium
- Patch risk
- Low
What it actually does
A use-after-free vulnerability in the e1000e network interface card emulation code caused by DMA reentrancy allows a privileged guest to trigger a crash of the QEMU process.
Why it matters to the business
Attackers with control of a virtual machine can cause the host hypervisor process to crash, leading to denial of service for all virtual machines on that host and potential operational disruption in virtualized environments.
How an attack unfolds
An attacker with privileged access inside a guest virtual machine crafts network or DMA operations that exploit reentrancy in the e1000e emulation, resulting in a use-after-free condition that crashes QEMU.
How to fix it
Update QEMU to the fixed commit 1600b9f46b1bd08b00fe86c46ef6dbb48cbe10d6 or later version.
How to confirm the fix worked
Verify QEMU version or commit hash includes the fix; test e1000e emulation under load for stability.
Typical attack path
- Obtain privileged access in a guest VM
- Trigger DMA operations via e1000e device
- Exploit reentrancy to cause use-after-free
- Crash QEMU process on host
How to detect it
Look for unexpected QEMU process crashes in logs around e1000e activity; no specific IOCs for exploitation since not widely exploited.
What your security team should do
- Prioritize updating QEMU in all environments using e1000e emulation
- Isolate or restrict privileged guest access where possible
- Monitor for QEMU crashes
The record
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:9 | qemu-guest-agent | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-img | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-block-curl | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-common | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-core | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-docs | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-tools | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 0 | 17:8.2.0-11.el9_4 |
| AlmaLinux:9 | qemu-pr-helper | 0 | 17:8.2.0-11.el9_4 |
| Debian:11 | qemu | 0 | No fix |
| Debian:12 | qemu | 0 | 1:7.2+dfsg-7+deb12u4 |
| Debian:13 | qemu | 0 | 1:8.2.0+ds-1 |
| Mageia:9 | qemu | 0 | 7.2.15-1.mga9 |
| Red Hat:enterprise_linux:8::appstream | SLOF | 0 | 0:20210217-1.module+el8.9.0+20735+c763a519.1 |
| Red Hat:enterprise_linux:8::appstream | hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debugsource | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-devel | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-appliance | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-bash-completion | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-debugsource | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gfs2 | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-java-devel | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-javadoc | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-rescue | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-rsync | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools-c | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-tools-c-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-winsupport | 0 | 0:8.9-1.module+el8.9.0+19846+58c50e4e |
| Red Hat:enterprise_linux:8::appstream | libguestfs-xfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-debuginfo | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-debugsource | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-devel | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-utils | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libiscsi-utils-debuginfo | 0 | 0:1.18.0-8.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libnbd | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libnbd-bash-completion | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libnbd-debuginfo | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libnbd-debugsource | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libnbd-devel | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libtpms | 0 | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libtpms-debuginfo | 0 | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libtpms-debugsource | 0 | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libtpms-devel | 0 | 0:0.9.1-2.20211126git1ff6fe1f43.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-client | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-client-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-config-network | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-config-nwfilter | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-interface | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-interface-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-network | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-network-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nodedev | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nodedev-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nwfilter | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-nwfilter-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-qemu | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-qemu-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-secret | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-secret-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-core | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-core-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-disk | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-disk-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-gluster | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-gluster-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-direct | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-iscsi-direct-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-logical | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-logical-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-mpath | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-mpath-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-rbd | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-rbd-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-scsi | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-driver-storage-scsi-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-daemon-kvm | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus | 0 | 0:1.3.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus-debuginfo | 0 | 0:1.3.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt-dbus-debugsource | 0 | 0:1.3.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-debugsource | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-devel | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-docs | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-libs | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-libs-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-lock-sanlock | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-lock-sanlock-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-nss | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-nss-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-python | 0 | 0:8.0.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt-python-debugsource | 0 | 0:8.0.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libvirt-wireshark | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | libvirt-wireshark-debuginfo | 0 | 0:8.0.0-22.module+el8.9.0+19544+b3045133 |
| Red Hat:enterprise_linux:8::appstream | lua-guestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | lua-guestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdfuse | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdfuse-debuginfo | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-bash-completion | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-filters | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-filters-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-plugins | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-basic-plugins-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-curl-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-curl-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-debugsource | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-devel | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-example-plugins | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-example-plugins-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-filter | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-filter-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-gzip-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-linuxdisk-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-linuxdisk-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-nbd-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-nbd-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-python-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-python-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-server | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-server-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-ssh-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-ssh-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-filter | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-filter-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tar-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tmpdisk-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-tmpdisk-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-vddk-plugin | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-vddk-plugin-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-xz-filter | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | nbdkit-xz-filter-debuginfo | 0 | 0:1.24.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf-debuginfo | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf-debugsource | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf-devel | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf-libs | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | netcf-libs-debuginfo | 0 | 0:0.2.8-12.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Guestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt | 0 | 0:8.0.0-1.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt-debuginfo | 0 | 0:8.0.0-1.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-Sys-Virt-debugsource | 0 | 0:8.0.0-1.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | perl-hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libguestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libguestfs-debuginfo | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libnbd | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libnbd-debuginfo | 0 | 0:1.6.0-5.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libvirt | 0 | 0:8.0.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | python3-libvirt-debuginfo | 0 | 0:8.0.0-2.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | qemu-guest-agent | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-guest-agent-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-img | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-img-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-curl | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-curl-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-gluster | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-gluster-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-iscsi | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-iscsi-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-rbd | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-rbd-debuginfo | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
| Red Hat:enterprise_linux:8::appstream | qemu-kvm-block-ssh | 0 | 15:6.2.0-40.module+el8.9.0+20867+9a6a0901.2 |
Related vulnerabilities
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects qemu-guest-agent
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects qemu-guest-agent
- CVE-2024-3446 A double free vulnerability was found in QEMU virtio devices (virtio-gpu… Also affects qemu-guest-agent
- CVE-2024-26327 An issue was discovered in QEMU 7.1.0 through 8.2.1. Also affects qemu-guest-agent
- CVE-2024-7730 A heap buffer overflow was found in the virtio-snd device in QEMU. Also affects qemu
- CVE-2024-3447 A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. Also affects qemu
- CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter… Also affects qemu
- CVE-2024-8612 A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. Also affects qemu