CVE-2019-5008
Fixed in a distro release EPSS 3%
hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ivshmem-tools | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-audio-alsa | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-audio-oss | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-audio-pa | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-audio-sdl | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-curl | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-dmg | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-iscsi | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-nfs | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-rbd | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-block-ssh | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-common | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-guest-agent | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-img | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-kvm | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-kvm-core | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-system-aarch64 | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-system-aarch64-core | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-system-x86 | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-system-x86-core | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-ui-curses | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-ui-gtk | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-ui-sdl | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-user | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-user-binfmt | 10:3.1.0-7.amzn2.0.1 |
| Amazon Linux 2 | qemu-user-static | 10:3.1.0-7.amzn2.0.1 |
| Debian 12 | qemu | 1:3.1+dfsg-8 |
| Debian 13 | qemu | 1:3.1+dfsg-8 |
| Debian 14 | qemu | 1:3.1+dfsg-8 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | qemu | 3.1.1-9.3.3 |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 | qemu | 3.1.1-9.3.3 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.46 |
| Ubuntu 16.04 LTS | qemu | 1:2.5+dfsg-5ubuntu10.38 |
| Ubuntu 18.04 LTS | qemu | 1:2.11+dfsg-1ubuntu7.13 |
| openSUSE Leap 15.1 | qemu | 3.1.1-lp151.7.3.3 |
| openSUSE Leap 15.1 | qemu-linux-user | 3.1.1-lp151.7.3.2 |
| openSUSE Leap 15.1 | qemu-testsuite | 3.1.1-lp151.7.3.3 |