UBUNTU-CVE-2022-4172

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2022-4172

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-4172.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-4172

Related

Published

2022-11-29T18:15:00Z

Modified

2022-11-29T18:15:00Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the readerstrecord() and writeerstrecord() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.

References

Affected packages

Ubuntu:20.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:4.2-3ubuntu6.24?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:4.2-3ubuntu6.24

Affected versions

1:4.*

1:4.0+dfsg-0ubuntu9

1:4.0+dfsg-0ubuntu10

1:4.2-1ubuntu1

1:4.2-1ubuntu2

1:4.2-3ubuntu1

1:4.2-3ubuntu2

1:4.2-3ubuntu3

1:4.2-3ubuntu4

1:4.2-3ubuntu5

1:4.2-3ubuntu6

1:4.2-3ubuntu6.1

1:4.2-3ubuntu6.2

1:4.2-3ubuntu6.3

1:4.2-3ubuntu6.4

1:4.2-3ubuntu6.5

1:4.2-3ubuntu6.6

1:4.2-3ubuntu6.7

1:4.2-3ubuntu6.8

1:4.2-3ubuntu6.9

1:4.2-3ubuntu6.10

1:4.2-3ubuntu6.11

1:4.2-3ubuntu6.12

1:4.2-3ubuntu6.14

1:4.2-3ubuntu6.15

1:4.2-3ubuntu6.16

1:4.2-3ubuntu6.17

1:4.2-3ubuntu6.18

1:4.2-3ubuntu6.19

1:4.2-3ubuntu6.21

1:4.2-3ubuntu6.23

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "1:4.2-3ubuntu6.24",
            "qemu-guest-agent-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-block-extra-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-utils-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-user": "1:4.2-3ubuntu6.24",
            "qemu-system-x86-microvm": "1:4.2-3ubuntu6.24",
            "qemu-kvm": "1:4.2-3ubuntu6.24",
            "qemu-system-arm-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-ppc-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-user-static": "1:4.2-3ubuntu6.24",
            "qemu-system-arm": "1:4.2-3ubuntu6.24",
            "qemu": "1:4.2-3ubuntu6.24",
            "qemu-system-x86-xen": "1:4.2-3ubuntu6.24",
            "qemu-system-sparc": "1:4.2-3ubuntu6.24",
            "qemu-system-data": "1:4.2-3ubuntu6.24",
            "qemu-system-common-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-s390x-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-x86-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system": "1:4.2-3ubuntu6.24",
            "qemu-guest-agent": "1:4.2-3ubuntu6.24",
            "qemu-utils": "1:4.2-3ubuntu6.24",
            "qemu-system-x86-xen-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-block-extra": "1:4.2-3ubuntu6.24",
            "qemu-system-misc-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-sparc-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-mips-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-x86": "1:4.2-3ubuntu6.24",
            "qemu-system-ppc": "1:4.2-3ubuntu6.24",
            "qemu-system-s390x": "1:4.2-3ubuntu6.24",
            "qemu-system-x86-microvm-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-common": "1:4.2-3ubuntu6.24",
            "qemu-system-gui-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-user-static-dbgsym": "1:4.2-3ubuntu6.24",
            "qemu-system-mips": "1:4.2-3ubuntu6.24",
            "qemu-system-gui": "1:4.2-3ubuntu6.24",
            "qemu-user-binfmt": "1:4.2-3ubuntu6.24",
            "qemu-user-dbgsym": "1:4.2-3ubuntu6.24"
        }
    ]
}

Ubuntu:22.04:LTS / qemu

Package

Name: qemu
Purl: pkg:deb/ubuntu/qemu@1:6.2+dfsg-2ubuntu6.6?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:6.2+dfsg-2ubuntu6.6

Affected versions

1:6.*

1:6.0+dfsg-2expubuntu1

1:6.0+dfsg-2expubuntu2

1:6.0+dfsg-2expubuntu4

1:6.2+dfsg-2ubuntu5

1:6.2+dfsg-2ubuntu6

1:6.2+dfsg-2ubuntu6.1

1:6.2+dfsg-2ubuntu6.2

1:6.2+dfsg-2ubuntu6.3

1:6.2+dfsg-2ubuntu6.4

1:6.2+dfsg-2ubuntu6.5

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "qemu-system-misc": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-guest-agent-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-block-extra-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-utils-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-user": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-x86-microvm": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-arm-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-ppc-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-user-static": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-arm": "1:6.2+dfsg-2ubuntu6.6",
            "qemu": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-x86-xen": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-sparc": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-data": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-common-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-s390x-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-x86-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-guest-agent": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-utils": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-x86-xen-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-block-extra": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-sparc-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-misc-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-mips-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-x86": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-ppc": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-s390x": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-common": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-gui-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-user-static-dbgsym": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-mips": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-system-gui": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-user-binfmt": "1:6.2+dfsg-2ubuntu6.6",
            "qemu-user-dbgsym": "1:6.2+dfsg-2ubuntu6.6"
        }
    ]
}