CVE-2021-3593

Upstream information

CVE-2021-3593 at MITRE

Description

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.

---

SUSE information

Overall state of this security issue: Running

This issue is currently rated as having low severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	2.1
Vector	AV:L/AC:L/Au:N/C:P/I:N/A:N
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	Partial
Integrity Impact	None
Availability Impact	None

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	3.8	3.8
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Access Vector	Local	Local
Access Complexity	Low	Low
Privileges Required	Low	Low
User Interaction	None	None
Scope	Changed	Changed
Confidentiality Impact	Low	Low
Integrity Impact	None	None
Availability Impact	None	None
CVSSv3 Version	3.1	3.1

SUSE Bugzilla entry: 1187365 [NEW]

SUSE Security Advisories:

• SUSE-IU-2022:148-1, published Sat Jan 29 07:28:34 UTC 2022
• SUSE-IU-2022:149-1, published Sat Jan 29 07:31:36 UTC 2022
• SUSE-IU-2022:237-1, published Thu Feb 3 07:28:34 UTC 2022
• SUSE-IU-2022:49-1, published Sat Jan 29 07:34:15 UTC 2022
• SUSE-SU-2021:2428-1, published Wed Jul 21 13:28:06 UTC 2021
• SUSE-SU-2021:2448-1, published Thu Jul 22 13:17:22 UTC 2021
• SUSE-SU-2021:2461-1, published Fri Jul 23 13:18:40 UTC 2021
• SUSE-SU-2021:2474-1, published Tue Jul 27 13:17:47 UTC 2021
• SUSE-SU-2021:2546-1, published Wed Jul 28 10:18:28 UTC 2021
• SUSE-SU-2021:2563-1, published Thu Jul 29 16:17:10 UTC 2021
• SUSE-SU-2021:2591-1, published Mon Aug 2 16:20:00 UTC 2021
• openSUSE-SU-2021:1202-1, published Thu Aug 26 21:42:26 2021
• openSUSE-SU-2021:2474-1, published Tue Jul 27 15:40:29 2021
• openSUSE-SU-2021:2591-1, published Mon Aug 2 18:40:28 2021

List of released packages

Product(s)	Fixed package version(s)	References
HPE Helion Openstack 8	qemu >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: HPE-Helion-OpenStack-8-2021-2563
Image SLES12-SP5-EC2-ECS-On-Demand	qemu-tools >= 3.1.1.1-54.1
Image SLES15-EC2-CHOST-HVM-BYOS	qemu-tools >= 2.11.2-9.49.1
Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE	qemu-tools >= 3.1.1.1-9.30.2
SUSE CaaS Platform 4.0	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SUSE-CAASP-4.0-2021-2591
SUSE Enterprise Storage 6	qemu >= 3.1.1.1-9.30.2 qemu-arm >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-Storage-6-2021-2591
SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2	qemu-tools >= 4.2.1-11.25.2	Patchnames: SUSE-SLE-Module-Basesystem-15-SP2-2021-2474
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	qemu >= 3.1.1.1-9.30.2 qemu-arm >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2591
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	qemu >= 3.1.1.1-9.30.2 qemu-arm >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2591
SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Storage 7 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1	qemu >= 4.2.1-11.25.2 qemu-arm >= 4.2.1-11.25.2 qemu-audio-alsa >= 4.2.1-11.25.2 qemu-audio-pa >= 4.2.1-11.25.2 qemu-block-curl >= 4.2.1-11.25.2 qemu-block-iscsi >= 4.2.1-11.25.2 qemu-block-rbd >= 4.2.1-11.25.2 qemu-block-ssh >= 4.2.1-11.25.2 qemu-guest-agent >= 4.2.1-11.25.2 qemu-ipxe >= 1.0.0+-11.25.2 qemu-kvm >= 4.2.1-11.25.2 qemu-lang >= 4.2.1-11.25.2 qemu-microvm >= 4.2.1-11.25.2 qemu-ppc >= 4.2.1-11.25.2 qemu-s390 >= 4.2.1-11.25.2 qemu-seabios >= 1.12.1+-11.25.2 qemu-sgabios >= 8-11.25.2 qemu-tools >= 4.2.1-11.25.2 qemu-ui-curses >= 4.2.1-11.25.2 qemu-ui-gtk >= 4.2.1-11.25.2 qemu-ui-spice-app >= 4.2.1-11.25.2 qemu-vgabios >= 1.12.1+-11.25.2 qemu-x86 >= 4.2.1-11.25.2	Patchnames: SUSE-SLE-Module-Basesystem-15-SP2-2021-2474 SUSE-SLE-Module-Server-Applications-15-SP2-2021-2474
SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS	qemu >= 2.11.2-9.49.1 qemu-arm >= 2.11.2-9.49.1 qemu-block-curl >= 2.11.2-9.49.1 qemu-block-iscsi >= 2.11.2-9.49.1 qemu-block-rbd >= 2.11.2-9.49.1 qemu-block-ssh >= 2.11.2-9.49.1 qemu-guest-agent >= 2.11.2-9.49.1 qemu-ipxe >= 1.0.0+-9.49.1 qemu-kvm >= 2.11.2-9.49.1 qemu-lang >= 2.11.2-9.49.1 qemu-seabios >= 1.11.0_0_g63451fc-9.49.1 qemu-sgabios >= 8-9.49.1 qemu-tools >= 2.11.2-9.49.1 qemu-vgabios >= 1.11.0_0_g63451fc-9.49.1 qemu-x86 >= 2.11.2-9.49.1	Patchnames: SUSE-SLE-Product-HPC-15-2021-2461
SUSE Linux Enterprise Micro 5.0	qemu >= 4.2.1-11.25.2 qemu-arm >= 4.2.1-11.25.2 qemu-ipxe >= 1.0.0+-11.25.2 qemu-seabios >= 1.12.1+-11.25.2 qemu-sgabios >= 8-11.25.2 qemu-tools >= 4.2.1-11.25.2 qemu-vgabios >= 1.12.1+-11.25.2 qemu-x86 >= 4.2.1-11.25.2	Patchnames: SUSE-SUSE-MicroOS-5.0-2021-2474
SUSE Linux Enterprise Module for Server Applications 15 SP2	qemu >= 4.2.1-11.25.2 qemu-arm >= 4.2.1-11.25.2 qemu-audio-alsa >= 4.2.1-11.25.2 qemu-audio-pa >= 4.2.1-11.25.2 qemu-block-curl >= 4.2.1-11.25.2 qemu-block-iscsi >= 4.2.1-11.25.2 qemu-block-rbd >= 4.2.1-11.25.2 qemu-block-ssh >= 4.2.1-11.25.2 qemu-guest-agent >= 4.2.1-11.25.2 qemu-ipxe >= 1.0.0+-11.25.2 qemu-kvm >= 4.2.1-11.25.2 qemu-lang >= 4.2.1-11.25.2 qemu-microvm >= 4.2.1-11.25.2 qemu-ppc >= 4.2.1-11.25.2 qemu-s390 >= 4.2.1-11.25.2 qemu-seabios >= 1.12.1+-11.25.2 qemu-sgabios >= 8-11.25.2 qemu-ui-curses >= 4.2.1-11.25.2 qemu-ui-gtk >= 4.2.1-11.25.2 qemu-ui-spice-app >= 4.2.1-11.25.2 qemu-vgabios >= 1.12.1+-11.25.2 qemu-x86 >= 4.2.1-11.25.2	Patchnames: SUSE-SLE-Module-Server-Applications-15-SP2-2021-2474
SUSE Linux Enterprise Server 12 SP2-BCL	qemu >= 2.6.2-41.68.1 qemu-block-curl >= 2.6.2-41.68.1 qemu-block-rbd >= 2.6.2-41.68.1 qemu-block-ssh >= 2.6.2-41.68.1 qemu-guest-agent >= 2.6.2-41.68.1 qemu-ipxe >= 1.0.0-41.68.1 qemu-kvm >= 2.6.2-41.68.1 qemu-lang >= 2.6.2-41.68.1 qemu-seabios >= 1.9.1_0_gb3ef39f-41.68.1 qemu-sgabios >= 8-41.68.1 qemu-tools >= 2.6.2-41.68.1 qemu-vgabios >= 1.9.1_0_gb3ef39f-41.68.1 qemu-x86 >= 2.6.2-41.68.1	Patchnames: SUSE-SLE-SERVER-12-SP2-BCL-2021-2428
SUSE Linux Enterprise Server 12 SP3-BCL	qemu >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-SLE-SERVER-12-SP3-BCL-2021-2563
SUSE Linux Enterprise Server 12 SP3-ESPOS	qemu >= 2.9.1-6.53.1 qemu-arm >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-SLE-SERVER-12-SP3-ESPOS-2021-2563
SUSE Linux Enterprise Server 12 SP3-LTSS	qemu >= 2.9.1-6.53.1 qemu-arm >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-ppc >= 2.9.1-6.53.1 qemu-s390 >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-SLE-SERVER-12-SP3-2021-2563
SUSE Linux Enterprise Server 12 SP4-ESPOS	qemu >= 2.11.2-5.35.1 qemu-arm >= 2.11.2-5.35.1 qemu-block-curl >= 2.11.2-5.35.1 qemu-block-iscsi >= 2.11.2-5.35.1 qemu-block-rbd >= 2.11.2-5.35.1 qemu-block-ssh >= 2.11.2-5.35.1 qemu-guest-agent >= 2.11.2-5.35.1 qemu-ipxe >= 1.0.0+-5.35.1 qemu-kvm >= 2.11.2-5.35.1 qemu-lang >= 2.11.2-5.35.1 qemu-seabios >= 1.11.0_0_g63451fc-5.35.1 qemu-sgabios >= 8-5.35.1 qemu-tools >= 2.11.2-5.35.1 qemu-vgabios >= 1.11.0_0_g63451fc-5.35.1 qemu-x86 >= 2.11.2-5.35.1	Patchnames: SUSE-SLE-SERVER-12-SP4-ESPOS-2021-2546
SUSE Linux Enterprise Server 12 SP4-LTSS	qemu >= 2.11.2-5.35.1 qemu-arm >= 2.11.2-5.35.1 qemu-block-curl >= 2.11.2-5.35.1 qemu-block-iscsi >= 2.11.2-5.35.1 qemu-block-rbd >= 2.11.2-5.35.1 qemu-block-ssh >= 2.11.2-5.35.1 qemu-guest-agent >= 2.11.2-5.35.1 qemu-ipxe >= 1.0.0+-5.35.1 qemu-kvm >= 2.11.2-5.35.1 qemu-lang >= 2.11.2-5.35.1 qemu-ppc >= 2.11.2-5.35.1 qemu-s390 >= 2.11.2-5.35.1 qemu-seabios >= 1.11.0_0_g63451fc-5.35.1 qemu-sgabios >= 8-5.35.1 qemu-tools >= 2.11.2-5.35.1 qemu-vgabios >= 1.11.0_0_g63451fc-5.35.1 qemu-x86 >= 2.11.2-5.35.1	Patchnames: SUSE-SLE-SERVER-12-SP4-LTSS-2021-2546
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5	qemu >= 3.1.1.1-54.1 qemu-arm >= 3.1.1.1-54.1 qemu-audio-alsa >= 3.1.1.1-54.1 qemu-audio-oss >= 3.1.1.1-54.1 qemu-audio-pa >= 3.1.1.1-54.1 qemu-audio-sdl >= 3.1.1.1-54.1 qemu-block-curl >= 3.1.1.1-54.1 qemu-block-iscsi >= 3.1.1.1-54.1 qemu-block-rbd >= 3.1.1.1-54.1 qemu-block-ssh >= 3.1.1.1-54.1 qemu-guest-agent >= 3.1.1.1-54.1 qemu-ipxe >= 1.0.0+-54.1 qemu-kvm >= 3.1.1.1-54.1 qemu-lang >= 3.1.1.1-54.1 qemu-ppc >= 3.1.1.1-54.1 qemu-s390 >= 3.1.1.1-54.1 qemu-seabios >= 1.12.0_0_ga698c89-54.1 qemu-sgabios >= 8-54.1 qemu-tools >= 3.1.1.1-54.1 qemu-ui-curses >= 3.1.1.1-54.1 qemu-ui-gtk >= 3.1.1.1-54.1 qemu-ui-sdl >= 3.1.1.1-54.1 qemu-vgabios >= 1.12.0_0_ga698c89-54.1 qemu-x86 >= 3.1.1.1-54.1	Patchnames: SUSE-SLE-SERVER-12-SP5-2021-2448
SUSE Linux Enterprise Server 15 SP1-BCL	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2591
SUSE Linux Enterprise Server 15 SP1-LTSS	qemu >= 3.1.1.1-9.30.2 qemu-arm >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-ppc >= 3.1.1.1-9.30.2 qemu-s390 >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2591
SUSE Linux Enterprise Server 15-LTSS	qemu >= 2.11.2-9.49.1 qemu-arm >= 2.11.2-9.49.1 qemu-block-curl >= 2.11.2-9.49.1 qemu-block-iscsi >= 2.11.2-9.49.1 qemu-block-rbd >= 2.11.2-9.49.1 qemu-block-ssh >= 2.11.2-9.49.1 qemu-guest-agent >= 2.11.2-9.49.1 qemu-ipxe >= 1.0.0+-9.49.1 qemu-kvm >= 2.11.2-9.49.1 qemu-lang >= 2.11.2-9.49.1 qemu-ppc >= 2.11.2-9.49.1 qemu-s390 >= 2.11.2-9.49.1 qemu-seabios >= 1.11.0_0_g63451fc-9.49.1 qemu-sgabios >= 8-9.49.1 qemu-tools >= 2.11.2-9.49.1 qemu-vgabios >= 1.11.0_0_g63451fc-9.49.1 qemu-x86 >= 2.11.2-9.49.1	Patchnames: SUSE-SLE-Product-SLES-15-2021-2461
SUSE Linux Enterprise Server for SAP Applications 12 SP3	qemu >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-ppc >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-SLE-SAP-12-SP3-2021-2563
SUSE Linux Enterprise Server for SAP Applications 12 SP4	qemu >= 2.11.2-5.35.1 qemu-block-curl >= 2.11.2-5.35.1 qemu-block-iscsi >= 2.11.2-5.35.1 qemu-block-rbd >= 2.11.2-5.35.1 qemu-block-ssh >= 2.11.2-5.35.1 qemu-guest-agent >= 2.11.2-5.35.1 qemu-ipxe >= 1.0.0+-5.35.1 qemu-kvm >= 2.11.2-5.35.1 qemu-lang >= 2.11.2-5.35.1 qemu-ppc >= 2.11.2-5.35.1 qemu-seabios >= 1.11.0_0_g63451fc-5.35.1 qemu-sgabios >= 8-5.35.1 qemu-tools >= 2.11.2-5.35.1 qemu-vgabios >= 1.11.0_0_g63451fc-5.35.1 qemu-x86 >= 2.11.2-5.35.1	Patchnames: SUSE-SLE-SAP-12-SP4-2021-2546
SUSE Linux Enterprise Server for SAP Applications 15 SP1	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-ppc >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2591
SUSE Linux Enterprise Server for SAP Applications 15	qemu >= 2.11.2-9.49.1 qemu-block-curl >= 2.11.2-9.49.1 qemu-block-iscsi >= 2.11.2-9.49.1 qemu-block-rbd >= 2.11.2-9.49.1 qemu-block-ssh >= 2.11.2-9.49.1 qemu-guest-agent >= 2.11.2-9.49.1 qemu-ipxe >= 1.0.0+-9.49.1 qemu-kvm >= 2.11.2-9.49.1 qemu-lang >= 2.11.2-9.49.1 qemu-ppc >= 2.11.2-9.49.1 qemu-seabios >= 1.11.0_0_g63451fc-9.49.1 qemu-sgabios >= 8-9.49.1 qemu-tools >= 2.11.2-9.49.1 qemu-vgabios >= 1.11.0_0_g63451fc-9.49.1 qemu-x86 >= 2.11.2-9.49.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-2021-2461
SUSE Manager Proxy 4.0	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2591
SUSE Manager Retail Branch Server 4.0	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2591
SUSE Manager Server 4.0	qemu >= 3.1.1.1-9.30.2 qemu-audio-alsa >= 3.1.1.1-9.30.2 qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-audio-pa >= 3.1.1.1-9.30.2 qemu-block-curl >= 3.1.1.1-9.30.2 qemu-block-iscsi >= 3.1.1.1-9.30.2 qemu-block-rbd >= 3.1.1.1-9.30.2 qemu-block-ssh >= 3.1.1.1-9.30.2 qemu-guest-agent >= 3.1.1.1-9.30.2 qemu-ipxe >= 1.0.0+-9.30.2 qemu-kvm >= 3.1.1.1-9.30.2 qemu-lang >= 3.1.1.1-9.30.2 qemu-ppc >= 3.1.1.1-9.30.2 qemu-s390 >= 3.1.1.1-9.30.2 qemu-seabios >= 1.12.0_0_ga698c89-9.30.2 qemu-sgabios >= 8-9.30.2 qemu-tools >= 3.1.1.1-9.30.2 qemu-ui-curses >= 3.1.1.1-9.30.2 qemu-ui-gtk >= 3.1.1.1-9.30.2 qemu-vgabios >= 1.12.0_0_ga698c89-9.30.2 qemu-x86 >= 3.1.1.1-9.30.2	Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2591
SUSE OpenStack Cloud 8	qemu >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-OpenStack-Cloud-8-2021-2563
SUSE OpenStack Cloud 9	qemu >= 2.11.2-5.35.1 qemu-block-curl >= 2.11.2-5.35.1 qemu-block-iscsi >= 2.11.2-5.35.1 qemu-block-rbd >= 2.11.2-5.35.1 qemu-block-ssh >= 2.11.2-5.35.1 qemu-guest-agent >= 2.11.2-5.35.1 qemu-ipxe >= 1.0.0+-5.35.1 qemu-kvm >= 2.11.2-5.35.1 qemu-lang >= 2.11.2-5.35.1 qemu-seabios >= 1.11.0_0_g63451fc-5.35.1 qemu-sgabios >= 8-5.35.1 qemu-tools >= 2.11.2-5.35.1 qemu-vgabios >= 1.11.0_0_g63451fc-5.35.1 qemu-x86 >= 2.11.2-5.35.1	Patchnames: SUSE-OpenStack-Cloud-9-2021-2546
SUSE OpenStack Cloud Crowbar 8	qemu >= 2.9.1-6.53.1 qemu-block-curl >= 2.9.1-6.53.1 qemu-block-iscsi >= 2.9.1-6.53.1 qemu-block-rbd >= 2.9.1-6.53.1 qemu-block-ssh >= 2.9.1-6.53.1 qemu-guest-agent >= 2.9.1-6.53.1 qemu-ipxe >= 1.0.0+-6.53.1 qemu-kvm >= 2.9.1-6.53.1 qemu-lang >= 2.9.1-6.53.1 qemu-seabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-sgabios >= 8-6.53.1 qemu-tools >= 2.9.1-6.53.1 qemu-vgabios >= 1.10.2_0_g5f4c7b1-6.53.1 qemu-x86 >= 2.9.1-6.53.1	Patchnames: SUSE-OpenStack-Cloud-Crowbar-8-2021-2563
SUSE OpenStack Cloud Crowbar 9	qemu >= 2.11.2-5.35.1 qemu-block-curl >= 2.11.2-5.35.1 qemu-block-iscsi >= 2.11.2-5.35.1 qemu-block-rbd >= 2.11.2-5.35.1 qemu-block-ssh >= 2.11.2-5.35.1 qemu-guest-agent >= 2.11.2-5.35.1 qemu-ipxe >= 1.0.0+-5.35.1 qemu-kvm >= 2.11.2-5.35.1 qemu-lang >= 2.11.2-5.35.1 qemu-seabios >= 1.11.0_0_g63451fc-5.35.1 qemu-sgabios >= 8-5.35.1 qemu-tools >= 2.11.2-5.35.1 qemu-vgabios >= 1.11.0_0_g63451fc-5.35.1 qemu-x86 >= 2.11.2-5.35.1	Patchnames: SUSE-OpenStack-Cloud-Crowbar-9-2021-2546
openSUSE Leap 15.2	qemu >= 4.2.1-lp152.9.20.1 qemu-arm >= 4.2.1-lp152.9.20.1 qemu-audio-alsa >= 4.2.1-lp152.9.20.1 qemu-audio-pa >= 4.2.1-lp152.9.20.1 qemu-audio-sdl >= 4.2.1-lp152.9.20.1 qemu-block-curl >= 4.2.1-lp152.9.20.1 qemu-block-dmg >= 4.2.1-lp152.9.20.1 qemu-block-gluster >= 4.2.1-lp152.9.20.1 qemu-block-iscsi >= 4.2.1-lp152.9.20.1 qemu-block-nfs >= 4.2.1-lp152.9.20.1 qemu-block-rbd >= 4.2.1-lp152.9.20.1 qemu-block-ssh >= 4.2.1-lp152.9.20.1 qemu-extra >= 4.2.1-lp152.9.20.1 qemu-guest-agent >= 4.2.1-lp152.9.20.1 qemu-ipxe >= 1.0.0+-lp152.9.20.1 qemu-ksm >= 4.2.1-lp152.9.20.1 qemu-kvm >= 4.2.1-lp152.9.20.1 qemu-lang >= 4.2.1-lp152.9.20.1 qemu-linux-user >= 4.2.1-lp152.9.20.1 qemu-microvm >= 4.2.1-lp152.9.20.1 qemu-ppc >= 4.2.1-lp152.9.20.1 qemu-s390 >= 4.2.1-lp152.9.20.1 qemu-seabios >= 1.12.1+-lp152.9.20.1 qemu-sgabios >= 8-lp152.9.20.1 qemu-testsuite >= 4.2.1-lp152.9.20.1 qemu-tools >= 4.2.1-lp152.9.20.1 qemu-ui-curses >= 4.2.1-lp152.9.20.1 qemu-ui-gtk >= 4.2.1-lp152.9.20.1 qemu-ui-sdl >= 4.2.1-lp152.9.20.1 qemu-ui-spice-app >= 4.2.1-lp152.9.20.1 qemu-vgabios >= 1.12.1+-lp152.9.20.1 qemu-vhost-user-gpu >= 4.2.1-lp152.9.20.1 qemu-x86 >= 4.2.1-lp152.9.20.1	Patchnames: openSUSE-2021-1202
openSUSE Leap 15.3	qemu-audio-oss >= 3.1.1.1-9.30.2 qemu-s390 >= 4.2.1-11.25.2	Patchnames: openSUSE-SLE-15.3-2021-2474 openSUSE-SLE-15.3-2021-2591

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-sles-12-sp5-v20210907-ecs-hvm-ssd-x86_64
• amazon/suse-sles-15-chost-byos-v20220201-hvm-ssd-x86_64
• amazon/suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64
• google/sles-15-sp1-chost-byos-v20220127
• microsoft/suse-sles-15-sp1-chost-byos-v20220127

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification.

Product(s)	Source package	State
HPE Helion OpenStack 8	qemu	Released
SUSE CaaS Platform 4.0	qemu	In progress
SUSE CaaS Platform 4.5	qemu	Released
SUSE Enterprise Storage 6	qemu	In progress
SUSE Enterprise Storage 7	qemu	Released
SUSE Linux Enterprise Desktop 15 SP2	qemu	Released
SUSE Linux Enterprise Desktop 15 SP3	qemu	Not affected
SUSE Linux Enterprise Desktop 15 SP4	qemu	Not affected
SUSE Linux Enterprise High Performance Computing 12 SP5	qemu	Released
SUSE Linux Enterprise High Performance Computing 15 LTSS	qemu	Released
SUSE Linux Enterprise High Performance Computing 15 SP1 ESPOS	qemu	In progress
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS	qemu	In progress
SUSE Linux Enterprise High Performance Computing 15 SP2	qemu	Released
SUSE Linux Enterprise High Performance Computing 15 SP2 ESPOS	qemu	Released
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS	qemu	Released
SUSE Linux Enterprise High Performance Computing 15 SP3	libslirp	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	qemu	Not affected
SUSE Linux Enterprise High Performance Computing 15 SP4	libslirp	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	qemu	Not affected
SUSE Linux Enterprise Micro 5.0	qemu	Released
SUSE Linux Enterprise Micro 5.1	libslirp	Affected
SUSE Linux Enterprise Micro 5.1	qemu	Not affected
SUSE Linux Enterprise Micro 5.2	libslirp	Affected
SUSE Linux Enterprise Micro 5.2	qemu	Not affected
SUSE Linux Enterprise Module for Basesystem 15 SP2	qemu	Released
SUSE Linux Enterprise Module for Basesystem 15 SP3	qemu	Not affected
SUSE Linux Enterprise Module for Basesystem 15 SP4	qemu	Not affected
SUSE Linux Enterprise Module for Server Applications 15 SP2	qemu	Released
SUSE Linux Enterprise Module for Server Applications 15 SP3	libslirp	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP3	qemu	Not affected
SUSE Linux Enterprise Module for Server Applications 15 SP4	libslirp	Affected
SUSE Linux Enterprise Module for Server Applications 15 SP4	qemu	Not affected
SUSE Linux Enterprise Point of Service 11 SP3	kvm	Not affected
SUSE Linux Enterprise Point of Service 11 SP3	qemu	Not affected
SUSE Linux Enterprise Real Time 15 SP2	qemu	Released
SUSE Linux Enterprise Server 11 SP1	kvm	Not affected
SUSE Linux Enterprise Server 11 SP3	kvm	Not affected
SUSE Linux Enterprise Server 11 SP4 LTSS	kvm	Not affected
SUSE Linux Enterprise Server 12 SP2 BCL	qemu	Released
SUSE Linux Enterprise Server 12 SP3 BCL	qemu	Released
SUSE Linux Enterprise Server 12 SP3 ESPOS	qemu	Released
SUSE Linux Enterprise Server 12 SP3 LTSS	qemu	Released
SUSE Linux Enterprise Server 12 SP4 ESPOS	qemu	Released
SUSE Linux Enterprise Server 12 SP4 LTSS	qemu	Released
SUSE Linux Enterprise Server 12 SP5	qemu	Released
SUSE Linux Enterprise Server 15 ESPOS	qemu	Released
SUSE Linux Enterprise Server 15 LTSS	qemu	Released
SUSE Linux Enterprise Server 15 SP1 LTSS	qemu	Released
SUSE Linux Enterprise Server 15 SP2	qemu	Released
SUSE Linux Enterprise Server 15 SP2 LTSS	qemu	Released
SUSE Linux Enterprise Server 15 SP3	libslirp	Affected
SUSE Linux Enterprise Server 15 SP3	qemu	Not affected
SUSE Linux Enterprise Server 15 SP4	libslirp	Affected
SUSE Linux Enterprise Server 15 SP4	qemu	Not affected
SUSE Linux Enterprise Server Business Critical Linux 15 SP1	qemu	In progress
SUSE Linux Enterprise Server Business Critical Linux 15 SP2	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP4	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5	qemu	In progress
SUSE Linux Enterprise Server for SAP Applications 15	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP1	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP2	qemu	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	libslirp	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	qemu	Not affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	libslirp	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	qemu	Not affected
SUSE Linux Enterprise Storage 7	qemu	Released
SUSE Linux Enterprise Storage 7.1	libslirp	Affected
SUSE Linux Enterprise Storage 7.1	qemu	Not affected
SUSE Manager Proxy 4.0	qemu	Released
SUSE Manager Proxy 4.1	qemu	Released
SUSE Manager Proxy 4.2	libslirp	Affected
SUSE Manager Proxy 4.2	qemu	Not affected
SUSE Manager Proxy 4.3	libslirp	Affected
SUSE Manager Proxy 4.3	qemu	Not affected
SUSE Manager Retail Branch Server 4.0	qemu	In progress
SUSE Manager Retail Branch Server 4.1	qemu	Released
SUSE Manager Retail Branch Server 4.2	libslirp	Affected
SUSE Manager Retail Branch Server 4.2	qemu	Not affected
SUSE Manager Retail Branch Server 4.3	libslirp	Affected
SUSE Manager Retail Branch Server 4.3	qemu	Not affected
SUSE Manager Server 4.0	qemu	Released
SUSE Manager Server 4.1	qemu	Released
SUSE Manager Server 4.2	libslirp	Affected
SUSE Manager Server 4.2	qemu	Not affected
SUSE Manager Server 4.3	libslirp	Affected
SUSE Manager Server 4.3	qemu	Not affected
SUSE OpenStack Cloud 8	qemu	Released
SUSE OpenStack Cloud 9	qemu	Released
SUSE OpenStack Cloud Crowbar 8	qemu	Released
SUSE OpenStack Cloud Crowbar 9	qemu	Released
suse/sles/15.3/libguestfs-tools:0.45.0 suse/sles/15.3/virt-launcher:0.45.0 suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.4/virt-launcher:0.49.0	qemu	Not affected
suse/sles/15.2/virt-launcher:0.38.1	qemu	In progress