USN-4283-1
- Source
- https://ubuntu.com/security/notices/USN-4283-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4283-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-4283-1
- Upstream
- Related
- Published
- 2020-02-18T16:56:46.455713Z
- Modified
- 2025-10-13T04:35:04Z
- Summary
- qemu vulnerabilities
- Details
-
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that QEMU incorrectly handled iSCSI server responses. A remote attacker in control of the iSCSI server could use this issue to cause QEMU to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2020-1711)
It was discovered that the QEMU libslirp component incorrectly handled memory. A remote attacker could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-7039, CVE-2020-8608)
- References
Affected packages
Ubuntu:16.04:LTS / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.43?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:2.5+dfsg-5ubuntu10.43
Affected versions
1:2.*
1:2.3+dfsg-5ubuntu9
1:2.3+dfsg-5ubuntu10
1:2.4+dfsg-4ubuntu1
1:2.4+dfsg-4ubuntu2
1:2.4+dfsg-4ubuntu3
1:2.4+dfsg-5ubuntu3
1:2.5+dfsg-1ubuntu2
1:2.5+dfsg-1ubuntu3
1:2.5+dfsg-1ubuntu4
1:2.5+dfsg-1ubuntu5
1:2.5+dfsg-5ubuntu1
1:2.5+dfsg-5ubuntu2
1:2.5+dfsg-5ubuntu4
1:2.5+dfsg-5ubuntu6
1:2.5+dfsg-5ubuntu7
1:2.5+dfsg-5ubuntu10
1:2.5+dfsg-5ubuntu10.1
1:2.5+dfsg-5ubuntu10.2
1:2.5+dfsg-5ubuntu10.3
1:2.5+dfsg-5ubuntu10.4
1:2.5+dfsg-5ubuntu10.5
1:2.5+dfsg-5ubuntu10.6
1:2.5+dfsg-5ubuntu10.7
1:2.5+dfsg-5ubuntu10.8
1:2.5+dfsg-5ubuntu10.9
1:2.5+dfsg-5ubuntu10.10
1:2.5+dfsg-5ubuntu10.11
1:2.5+dfsg-5ubuntu10.13
1:2.5+dfsg-5ubuntu10.14
1:2.5+dfsg-5ubuntu10.15
1:2.5+dfsg-5ubuntu10.16
1:2.5+dfsg-5ubuntu10.20
1:2.5+dfsg-5ubuntu10.21
1:2.5+dfsg-5ubuntu10.22
1:2.5+dfsg-5ubuntu10.24
1:2.5+dfsg-5ubuntu10.25
1:2.5+dfsg-5ubuntu10.26
1:2.5+dfsg-5ubuntu10.28
1:2.5+dfsg-5ubuntu10.29
1:2.5+dfsg-5ubuntu10.30
1:2.5+dfsg-5ubuntu10.31
1:2.5+dfsg-5ubuntu10.32
1:2.5+dfsg-5ubuntu10.33
1:2.5+dfsg-5ubuntu10.34
1:2.5+dfsg-5ubuntu10.35
1:2.5+dfsg-5ubuntu10.36
1:2.5+dfsg-5ubuntu10.37
1:2.5+dfsg-5ubuntu10.38
1:2.5+dfsg-5ubuntu10.39
1:2.5+dfsg-5ubuntu10.40
1:2.5+dfsg-5ubuntu10.41
1:2.5+dfsg-5ubuntu10.42
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-block-extra"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-guest-agent"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-kvm"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-aarch64"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-arm"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-common"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-mips"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-misc"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-ppc"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-s390x"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-sparc"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-system-x86"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-user"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-user-binfmt"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-user-static"
},
{
"binary_version": "1:2.5+dfsg-5ubuntu10.43",
"binary_name": "qemu-utils"
}
]
}
Database specific
{
"cves_map": {
"ecosystem": "Ubuntu:16.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-1711"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-7039"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-8608"
}
]
}
}
Ubuntu:18.04:LTS / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.23?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:2.11+dfsg-1ubuntu7.23
Affected versions
1:2.*
1:2.10+dfsg-0ubuntu3
1:2.10+dfsg-0ubuntu4
1:2.10+dfsg-0ubuntu5
1:2.11+dfsg-1ubuntu1
1:2.11+dfsg-1ubuntu2
1:2.11+dfsg-1ubuntu4
1:2.11+dfsg-1ubuntu5
1:2.11+dfsg-1ubuntu6
1:2.11+dfsg-1ubuntu7
1:2.11+dfsg-1ubuntu7.1
1:2.11+dfsg-1ubuntu7.2
1:2.11+dfsg-1ubuntu7.3
1:2.11+dfsg-1ubuntu7.4
1:2.11+dfsg-1ubuntu7.5
1:2.11+dfsg-1ubuntu7.6
1:2.11+dfsg-1ubuntu7.7
1:2.11+dfsg-1ubuntu7.8
1:2.11+dfsg-1ubuntu7.9
1:2.11+dfsg-1ubuntu7.10
1:2.11+dfsg-1ubuntu7.12
1:2.11+dfsg-1ubuntu7.13
1:2.11+dfsg-1ubuntu7.14
1:2.11+dfsg-1ubuntu7.15
1:2.11+dfsg-1ubuntu7.17
1:2.11+dfsg-1ubuntu7.18
1:2.11+dfsg-1ubuntu7.19
1:2.11+dfsg-1ubuntu7.20
1:2.11+dfsg-1ubuntu7.21
1:2.11+dfsg-1ubuntu7.22
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-block-extra"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-guest-agent"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-kvm"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-arm"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-common"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-mips"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-misc"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-ppc"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-s390x"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-sparc"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-system-x86"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-user"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-user-binfmt"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-user-static"
},
{
"binary_version": "1:2.11+dfsg-1ubuntu7.23",
"binary_name": "qemu-utils"
}
]
}
Database specific
{
"cves_map": {
"ecosystem": "Ubuntu:18.04:LTS",
"cves": [
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-1711"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-7039"
},
{
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2020-8608"
}
]
}
}