UBUNTU-CVE-2019-12068

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2019-12068

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-12068.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2019-12068

Related

Published

2019-09-24T20:15:00Z

Modified

2019-09-24T20:15:00Z

Severity

3.8 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L CVSS Calculator

Summary

[none]

Details

In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsiexecutescript(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.

References

Affected packages

Ubuntu:Pro:14.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@2.0.0+dfsg-2ubuntu1.47?arch=src?distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.0+dfsg-2ubuntu1.47

Affected versions

1.*

1.5.0+dfsg-3ubuntu5

1.5.0+dfsg-3ubuntu6

1.6.0+dfsg-2ubuntu1

1.6.0+dfsg-2ubuntu2

1.6.0+dfsg-2ubuntu3

1.6.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu1

1.7.0+dfsg-2ubuntu2

1.7.0+dfsg-2ubuntu3

1.7.0+dfsg-2ubuntu4

1.7.0+dfsg-2ubuntu5

1.7.0+dfsg-2ubuntu7

1.7.0+dfsg-2ubuntu8

1.7.0+dfsg-2ubuntu9

1.7.0+dfsg-3ubuntu1~ppa1

1.7.0+dfsg-3ubuntu1

1.7.0+dfsg-3ubuntu2

1.7.0+dfsg-3ubuntu3

1.7.0+dfsg-3ubuntu4

1.7.0+dfsg-3ubuntu5

1.7.0+dfsg-3ubuntu6

1.7.0+dfsg-3ubuntu7

2.*

2.0.0~rc1+dfsg-0ubuntu1

2.0.0~rc1+dfsg-0ubuntu2

2.0.0~rc1+dfsg-0ubuntu3

2.0.0~rc1+dfsg-0ubuntu3.1

2.0.0+dfsg-2ubuntu1

2.0.0+dfsg-2ubuntu1.1

2.0.0+dfsg-2ubuntu1.2

2.0.0+dfsg-2ubuntu1.3

2.0.0+dfsg-2ubuntu1.5

2.0.0+dfsg-2ubuntu1.6

2.0.0+dfsg-2ubuntu1.7

2.0.0+dfsg-2ubuntu1.8

2.0.0+dfsg-2ubuntu1.9

2.0.0+dfsg-2ubuntu1.10

2.0.0+dfsg-2ubuntu1.11

2.0.0+dfsg-2ubuntu1.13

2.0.0+dfsg-2ubuntu1.14

2.0.0+dfsg-2ubuntu1.15

2.0.0+dfsg-2ubuntu1.16

2.0.0+dfsg-2ubuntu1.17

2.0.0+dfsg-2ubuntu1.18

2.0.0+dfsg-2ubuntu1.19

2.0.0+dfsg-2ubuntu1.20

2.0.0+dfsg-2ubuntu1.21

2.0.0+dfsg-2ubuntu1.22

2.0.0+dfsg-2ubuntu1.24

2.0.0+dfsg-2ubuntu1.25

2.0.0+dfsg-2ubuntu1.26

2.0.0+dfsg-2ubuntu1.27

2.0.0+dfsg-2ubuntu1.28

2.0.0+dfsg-2ubuntu1.29

2.0.0+dfsg-2ubuntu1.30

2.0.0+dfsg-2ubuntu1.31

2.0.0+dfsg-2ubuntu1.32

2.0.0+dfsg-2ubuntu1.33

2.0.0+dfsg-2ubuntu1.34

2.0.0+dfsg-2ubuntu1.35

2.0.0+dfsg-2ubuntu1.36

2.0.0+dfsg-2ubuntu1.38

2.0.0+dfsg-2ubuntu1.39

2.0.0+dfsg-2ubuntu1.40

2.0.0+dfsg-2ubuntu1.41

2.0.0+dfsg-2ubuntu1.42

2.0.0+dfsg-2ubuntu1.43

2.0.0+dfsg-2ubuntu1.44

2.0.0+dfsg-2ubuntu1.45

2.0.0+dfsg-2ubuntu1.46

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-guest-agent-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-arm-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-utils-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-user": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-kvm": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-ppc-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-aarch64": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-user-static": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-arm": "2.0.0+dfsg-2ubuntu1.47",
            "qemu": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-sparc": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-common-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-common": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-x86-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-guest-agent": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-utils": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-misc-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-sparc-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-mips-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-x86": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-ppc": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-common": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-keymaps": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-user-static-dbgsym": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-system-mips": "2.0.0+dfsg-2ubuntu1.47",
            "qemu-user-dbgsym": "2.0.0+dfsg-2ubuntu1.47"
        }
    ]
}

Ubuntu:16.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:2.5+dfsg-5ubuntu10.42?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.5+dfsg-5ubuntu10.42

Affected versions

1:2.*

1:2.3+dfsg-5ubuntu9

1:2.3+dfsg-5ubuntu10

1:2.4+dfsg-4ubuntu1

1:2.4+dfsg-4ubuntu2

1:2.4+dfsg-4ubuntu3

1:2.4+dfsg-5ubuntu3

1:2.5+dfsg-1ubuntu2

1:2.5+dfsg-1ubuntu3

1:2.5+dfsg-1ubuntu4

1:2.5+dfsg-1ubuntu5

1:2.5+dfsg-5ubuntu1

1:2.5+dfsg-5ubuntu2

1:2.5+dfsg-5ubuntu4

1:2.5+dfsg-5ubuntu6

1:2.5+dfsg-5ubuntu7

1:2.5+dfsg-5ubuntu10

1:2.5+dfsg-5ubuntu10.1

1:2.5+dfsg-5ubuntu10.2

1:2.5+dfsg-5ubuntu10.3

1:2.5+dfsg-5ubuntu10.4

1:2.5+dfsg-5ubuntu10.5

1:2.5+dfsg-5ubuntu10.6

1:2.5+dfsg-5ubuntu10.7

1:2.5+dfsg-5ubuntu10.8

1:2.5+dfsg-5ubuntu10.9

1:2.5+dfsg-5ubuntu10.10

1:2.5+dfsg-5ubuntu10.11

1:2.5+dfsg-5ubuntu10.13

1:2.5+dfsg-5ubuntu10.14

1:2.5+dfsg-5ubuntu10.15

1:2.5+dfsg-5ubuntu10.16

1:2.5+dfsg-5ubuntu10.20

1:2.5+dfsg-5ubuntu10.21

1:2.5+dfsg-5ubuntu10.22

1:2.5+dfsg-5ubuntu10.24

1:2.5+dfsg-5ubuntu10.25

1:2.5+dfsg-5ubuntu10.26

1:2.5+dfsg-5ubuntu10.28

1:2.5+dfsg-5ubuntu10.29

1:2.5+dfsg-5ubuntu10.30

1:2.5+dfsg-5ubuntu10.31

1:2.5+dfsg-5ubuntu10.32

1:2.5+dfsg-5ubuntu10.33

1:2.5+dfsg-5ubuntu10.34

1:2.5+dfsg-5ubuntu10.35

1:2.5+dfsg-5ubuntu10.36

1:2.5+dfsg-5ubuntu10.37

1:2.5+dfsg-5ubuntu10.38

1:2.5+dfsg-5ubuntu10.39

1:2.5+dfsg-5ubuntu10.40

1:2.5+dfsg-5ubuntu10.41

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-guest-agent-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-block-extra-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-utils-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-user": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-arm-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-kvm": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-ppc-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-aarch64": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-user-static": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-arm": "1:2.5+dfsg-5ubuntu10.42",
            "qemu": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-sparc": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-s390x-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-common-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-x86-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-guest-agent": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-utils": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-sparc-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-misc-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-block-extra": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-mips-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-x86": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-ppc": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-s390x": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-common": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-user-static-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-system-mips": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-user-dbgsym": "1:2.5+dfsg-5ubuntu10.42",
            "qemu-user-binfmt": "1:2.5+dfsg-5ubuntu10.42"
        }
    ]
}

Ubuntu:18.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:2.11+dfsg-1ubuntu7.20?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.11+dfsg-1ubuntu7.20

Affected versions

1:2.*

1:2.10+dfsg-0ubuntu3

1:2.10+dfsg-0ubuntu4

1:2.10+dfsg-0ubuntu5

1:2.11+dfsg-1ubuntu1

1:2.11+dfsg-1ubuntu2

1:2.11+dfsg-1ubuntu4

1:2.11+dfsg-1ubuntu5

1:2.11+dfsg-1ubuntu6

1:2.11+dfsg-1ubuntu7

1:2.11+dfsg-1ubuntu7.1

1:2.11+dfsg-1ubuntu7.2

1:2.11+dfsg-1ubuntu7.3

1:2.11+dfsg-1ubuntu7.4

1:2.11+dfsg-1ubuntu7.5

1:2.11+dfsg-1ubuntu7.6

1:2.11+dfsg-1ubuntu7.7

1:2.11+dfsg-1ubuntu7.8

1:2.11+dfsg-1ubuntu7.9

1:2.11+dfsg-1ubuntu7.10

1:2.11+dfsg-1ubuntu7.12

1:2.11+dfsg-1ubuntu7.13

1:2.11+dfsg-1ubuntu7.14

1:2.11+dfsg-1ubuntu7.15

1:2.11+dfsg-1ubuntu7.17

1:2.11+dfsg-1ubuntu7.18

1:2.11+dfsg-1ubuntu7.19

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-guest-agent-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-block-extra-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-utils-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-user": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-arm-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-kvm": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-ppc-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-user-static": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-arm": "1:2.11+dfsg-1ubuntu7.20",
            "qemu": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-sparc": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-s390x-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-common-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-x86-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-guest-agent": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-utils": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-block-extra": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-misc-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-sparc-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-mips-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-x86": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-ppc": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-s390x": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-common": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-user-static-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-system-mips": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-user-dbgsym": "1:2.11+dfsg-1ubuntu7.20",
            "qemu-user-binfmt": "1:2.11+dfsg-1ubuntu7.20"
        }
    ]
}

Ubuntu:20.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:4.2-1ubuntu1?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:4.2-1ubuntu1

Affected versions

1:4.*

1:4.0+dfsg-0ubuntu9

1:4.0+dfsg-0ubuntu10

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "qemu-system-misc": "1:4.2-1ubuntu1",
            "qemu-guest-agent-dbgsym": "1:4.2-1ubuntu1",
            "qemu-block-extra-dbgsym": "1:4.2-1ubuntu1",
            "qemu-utils-dbgsym": "1:4.2-1ubuntu1",
            "qemu-user": "1:4.2-1ubuntu1",
            "qemu-system-arm-dbgsym": "1:4.2-1ubuntu1",
            "qemu-kvm": "1:4.2-1ubuntu1",
            "qemu-system-ppc-dbgsym": "1:4.2-1ubuntu1",
            "qemu-user-static": "1:4.2-1ubuntu1",
            "qemu-system-arm": "1:4.2-1ubuntu1",
            "qemu": "1:4.2-1ubuntu1",
            "qemu-system-x86-xen": "1:4.2-1ubuntu1",
            "qemu-system-sparc": "1:4.2-1ubuntu1",
            "qemu-system-data": "1:4.2-1ubuntu1",
            "qemu-system-common-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-s390x-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-x86-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system": "1:4.2-1ubuntu1",
            "qemu-guest-agent": "1:4.2-1ubuntu1",
            "qemu-utils": "1:4.2-1ubuntu1",
            "qemu-system-x86-xen-dbgsym": "1:4.2-1ubuntu1",
            "qemu-block-extra": "1:4.2-1ubuntu1",
            "qemu-system-sparc-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-misc-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-mips-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-x86": "1:4.2-1ubuntu1",
            "qemu-system-ppc": "1:4.2-1ubuntu1",
            "qemu-system-s390x": "1:4.2-1ubuntu1",
            "qemu-system-common": "1:4.2-1ubuntu1",
            "qemu-system-gui-dbgsym": "1:4.2-1ubuntu1",
            "qemu-user-static-dbgsym": "1:4.2-1ubuntu1",
            "qemu-system-mips": "1:4.2-1ubuntu1",
            "qemu-system-gui": "1:4.2-1ubuntu1",
            "qemu-user-binfmt": "1:4.2-1ubuntu1",
            "qemu-user-dbgsym": "1:4.2-1ubuntu1"
        }
    ]
}