SUSE-SU-2021:2789-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 20 Aug 2021, 08:08
Last modified:04 Feb 2026, 03:02

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Aug 2021, 08:08
Published
Vulnerability first disclosed
04 Feb 2026, 03:02
Last Modified
Vulnerability information updated

Description

Security update for qemu This update for qemu fixes the following issues: Security issues fixed: - usbredir: free call on invalid pointer in bufp_alloc (bsc#1189145, CVE-2021-3682) - NULL pointer dereference in ESP (bsc#1180433, CVE-2020-35504) (bsc#1180434, CVE-2020-35505) (bsc#1180435, CVE-2020-35506) - NULL pointer dereference issue in megasas-gen2 host bus adapter (bsc#1180432, CVE-2020-35503) - eepro100: stack overflow via infinite recursion (bsc#1182651, CVE-2021-20255) - usb: unbounded stack allocation in usbredir (bsc#1186012, CVE-2021-3527)

Affected Systems

  • suse•qemu&distro=SUSE Linux Enterprise Micro 5.0

    < 4.2.1-11.28.1

  • suse•qemu&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2

    < 4.2.1-11.28.1

  • suse•qemu&distro=SUSE Linux Enterprise Module for Server Applications 15 SP2

    < 4.2.1-11.28.1

References (15)