OPENSUSE-SU-2021:3604-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 03 Nov 2021, 13:59
Last modified:07 May 2025, 18:13

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Nov 2021, 13:59
Published
Vulnerability first disclosed
07 May 2025, 18:13
Last Modified
Vulnerability information updated

Description

Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3713: Fix out-of-bounds write in UAS (USB Attached SCSI) device emulation (bsc#1189702) - CVE-2021-3748: Fix heap use-after-free in virtio_net_receive_rcu (bsc#1189938) Non-security issues fixed: - Add transfer length item in block limits page of scsi vpd (bsc#1190425) - Fix qemu crash while deleting xen-block (bsc#1189234)

Affected Systems

  • opensuse•qemu&distro=openSUSE Leap 15.3

    < 4.2.1-11.31.3

References (7)