Lucene search
RedHatRHSA-2023:5094HistorySep 12, 2023 - 7:46 a.m.
(RHSA-2023:5094) Important: qemu-kvm security and bug fix update
2023-09-1207:46:21
access.redhat.com
11
qemu-kvm
full virtualization
security fix
bug fix
vnc
tls handshake
denial of service
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.
Security Fix(es):
- QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service (CVE-2023-3354)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
-
[qemu-kvm] rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization (BZ#2211923)
-
[rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest (BZ#2227721)
Related
cve
cve
CVE-2023-3354
2023-07-11 17:15:13
alpinelinux
alpinelinux
CVE-2023-3354
2023-07-11 17:15:13
cbl_mariner
cbl_mariner
CVE-2023-3354 affecting package qemu for versions less than 8.2.0-1
2024-03-19 17:21:46
CVE-2023-3354 affecting package qemu for versions less than 6.2.0-19
2023-11-28 22:14:06
oraclelinux
oraclelinux
qemu-kvm security and bug fix update
2023-09-13 00:00:00
virt:ol and virt-devel:rhel security and bug fix update
2023-09-21 00:00:00
kvm_utils3 security update
2023-10-07 00:00:00
osv
osv
CVE-2023-3354
2023-07-11 17:15:13
Important: qemu-kvm security and bug fix update
2023-09-12 00:00:00
Important: virt:rhel and virt-devel:rhel security and bug fix update
2023-09-19 00:00:00
nvd
nvd
CVE-2023-3354
2023-07-11 17:15:13
nessus
nessus
AlmaLinux 9 : qemu-kvm (ALSA-2023:5094)
2023-09-14 00:00:00
Oracle Linux 9 : qemu-kvm (ELSA-2023-5094)
2023-09-13 00:00:00
EulerOS 2.0 SP8 : qemu (EulerOS-SA-2023-3153)
2024-01-16 00:00:00
debiancve
debiancve
CVE-2023-3354
2023-07-11 17:15:13
redhatcve
redhatcve
CVE-2023-3354
2023-06-28 11:17:06
openvas
openvas
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3153)
2023-11-09 00:00:00
Huawei EulerOS: Security Advisory for qemu-micro (EulerOS-SA-2023-3228)
2023-11-10 00:00:00
Huawei EulerOS: Security Advisory for qemu-micro (EulerOS-SA-2023-3193)
2023-11-10 00:00:00
cvelist
cvelist
redos
redos
ROS-20230825-05
2023-08-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-13 19:55:03
redhat
redhat
(RHSA-2023:6227) Important: qemu-kvm security update
2023-11-01 08:58:37
(RHSA-2023:5587) Important: virt:rhel security update
2023-10-10 13:59:54
(RHSA-2023:5239) Important: virt:rhel and virt-devel:rhel security update
2023-09-19 12:23:30
ubuntucve
ubuntucve
CVE-2023-3354
2023-07-11 00:00:00
prion
prion
Null pointer dereference
2023-07-11 17:15:00
almalinux
almalinux
Important: qemu-kvm security and bug fix update
2023-09-12 00:00:00
Important: virt:rhel and virt-devel:rhel security and bug fix update
2023-09-19 00:00:00
debian
debian
[SECURITY] [DLA 3759-1] qemu security update
2024-03-11 17:27:07
fedora
fedora
[SECURITY] Fedora 38 Update: qemu-7.2.5-1.fc38
2023-08-29 01:35:27
ubuntu
ubuntu
QEMU regression
2024-06-06 00:00:00
QEMU vulnerabilities
2024-01-08 00:00:00