USN-6954-1

Dashboard / Vulnerabilities / USN-6954-1

USN-6954-1

Summary: qemu vulnerabilities

Details: Markus Frank and Fiona Ebner discovered that QEMU did not properly handle certain memory operations, leading to a NULL pointer dereference. An authenticated user could potentially use this issue to cause a denial of service. (CVE-2023-6683) Xiao Lei discovered that QEMU did not properly handle certain memory operations when specific features were enabled, which could lead to a stack overflow. An attacker could potentially use this issue to leak sensitive information. (CVE-2023-6693) It was discovered that QEMU had an integer underflow vulnerability in the TI command, which would result in a buffer overflow. An attacker could potentially use this issue to cause a denial of service. (CVE-2024-24474)

References: https://ubuntu.com/security/notices/USN-6954-1, https://ubuntu.com/security/CVE-2023-6683, https://ubuntu.com/security/CVE-2023-6693, https://ubuntu.com/security/CVE-2024-24474