Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-12068
3.8
LOWCVSS v3
Published
September 24, 2019
CVSS v2
2.1 LOW
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
qemu-project/qemuGitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org
GitLabQEMU main repository: Please see https://www.qemu.org/docs/master/devel/submitting-a-patch.html for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website. http://www.qemu.org= 1:4.1-1, = 1:2.1+dfsg-12+deb8u6, = 1:2.8+dfsg-6+deb9u8, = 1:3.1+dfsg-8+deb10u2, = 1:3.1+dfsg-8~deb10u1NVD
qemu/qemu
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
GitHubOfficial QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.= 1:4.1-1, = 1:2.1+dfsg-12+deb8u6, = 1:2.8+dfsg-6+deb9u8, = 1:3.1+dfsg-8+deb10u2, = 1:3.1+dfsg-8~deb10u1NVD
Docker Hub