Test ID:	1.3.6.1.4.1.25623.1.1.4.2021.1243.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2021:1243-1)
Summary:	The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2021:1243-1 advisory.
Description:	Summary: The remote host is missing an update for the 'qemu' package(s) announced via the SUSE-SU-2021:1243-1 advisory. Vulnerability Insight: This update for qemu fixes the following issues: CVE-2020-12829: Fix OOB access in sm501 device emulation (bsc#1172385) CVE-2020-25723: Fix use-after-free in usb xhci packet handling (bsc#1178934) CVE-2020-25084: Fix use-after-free in usb ehci packet handling (bsc#1176673) CVE-2020-25625: Fix infinite loop (DoS) in usb hcd-ohci emulation (bsc#1176684) CVE-2020-25624: Fix OOB access in usb hcd-ohci emulation (bsc#1176682) CVE-2020-27617: Fix guest triggerable assert in shared network handling code (bsc#1178174) CVE-2020-28916: Fix infinite loop (DoS) in e1000e device emulation (bsc#1179468) CVE-2020-29443: Fix OOB access in atapi emulation (bsc#1181108) CVE-2020-27821: Fix heap overflow in MSIx emulation (bsc#1179686) CVE-2020-15469: Fix null pointer deref. (DoS) in mmio ops (bsc#1173612) CVE-2021-20257: Fix infinite loop (DoS) in e1000 device emulation (bsc#1182577) CVE-2021-3416: Fix OOB access (stack overflow) in rtl8139 NIC emulation (bsc#1182968) CVE-2021-3416: Fix OOB access (stack overflow) in other NIC emulations (bsc#1182968) CVE-2020-27616: Fix OOB access in ati-vga emulation (bsc#1178400) CVE-2020-29129: Fix OOB access in SLIRP ARP/NCSI packet processing (bsc#1179466, CVE-2020-29130, bsc#1179467) Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) Add split-provides through forsplits/13 to cover updates of SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (bsc#1184064) Added a few more usability improvements for our git packaging workflow Affected Software/OS: 'qemu' package(s) on SUSE Linux Enterprise Module for Basesystem 15-SP2, SUSE Linux Enterprise Module for Server Applications 15-SP2, SUSE MicroOS 5.0. Solution: Please install the updated package(s). CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3416 https://bugzilla.redhat.com/show_bug.cgi?id=1932827 https://www.openwall.com/lists/oss-security/2021/02/26/1 https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.