Ubuntu 20.04 QEMU Critical Denial of Service Vuln USN-8412

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in QEMU. Software Description: - qemu: Machine emulator and virtualizer Details: Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly handled certain responses from an iSCSI server. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-1711) It was discovered that the iSCSI block driver in QEMU incorrectly handled certain memory operations, leading to a heap-based buffer over-read. An attacker could possibly use this issue to expose sensitive information from the host. This issue only affected Ubuntu 14.04 LTS. (CVE-2020-11947) Ziming Zhang discovered that the SM501 display driver in QEMU...

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS qemu 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-block-extra 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-guest-agent 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-kvm 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-arm 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-common 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-data 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-gui 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-mips 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-misc 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-ppc 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-s390x 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-sparc 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-x86 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-x86-microvm 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-system-x86-xen 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-user 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-user-binfmt 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-user-static 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro qemu-utils 1:4.2-3ubuntu6.30+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-block-extra 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-guest-agent 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-kvm 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-arm 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-common 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-mips 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-misc 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-ppc 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-s390x 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-sparc 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-system-x86 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-user 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-user-binfmt 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-user-static 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro qemu-utils 1:2.11+dfsg-1ubuntu7.42+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-block-extra 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-guest-agent 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-kvm 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-arm 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-common 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-mips 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-misc 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-system-x86 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-user 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-user-binfmt 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-user-static 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro qemu-utils 1:2.5+dfsg-5ubuntu10.51+esm4 Available with Ubuntu Pro Ubuntu 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-common 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-guest-agent 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-keymaps 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-kvm 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-aarch64 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-arm 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-common 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-mips 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-misc 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-ppc 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-sparc 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-system-x86 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-user 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-user-static 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro qemu-utils 2.0.0+dfsg-2ubuntu1.47+esm6 Available with Ubuntu Pro After a standard system update you need to restart all QEMU virtual machines to make all the necessary changes.

CVE-2020-11947, CVE-2020-12829, CVE-2020-14394, CVE-2020-15469,

CVE-2020-15859, CVE-2020-15863, CVE-2020-1711, CVE-2020-17380,

CVE-2020-25084, CVE-2020-25624, CVE-2020-25625, CVE-2020-25723,

CVE-2020-27617, CVE-2020-29443, CVE-2020-35504, CVE-2020-35505,

CVE-2021-20181, CVE-2021-20196, CVE-2021-20203, CVE-2021-20221,

CVE-2021-20257, CVE-2021-3409, CVE-2021-3416, CVE-2021-3507,

CVE-2021-3527, CVE-2021-4206, CVE-2021-4207, CVE-2023-2861,

CVE-2023-3180, CVE-2023-3354, CVE-2023-5088, CVE-2024-3446,

CVE-2024-3447, CVE-2024-4467, CVE-2024-6519, CVE-2024-7409,

CVE-2024-8354, CVE-2025-11234, CVE-2026-2243

Ubuntu Security Notice USN-8412-1

Get the latest Linux and open source security news straight to your inbox.