CVE catalog

CVE-2021-3409

qemu: CVE-2021-3409

Severity: Medium · CVSS 5.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Published: Jan 1, 2021, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.49% · Oct 25, 2026

The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	qemu	sid	`1:11.1.2+ds-3`	fixed
Debian	qemu	forky	`1:11.1.2+ds-3`	fixed
Debian	qemu	trixie	`1:10.0.13+ds-0+deb13u1`	fixed
Debian	qemu	trixie-security	`1:10.0.2+ds-2+deb13u1`	fixed
Debian	qemu	bookworm	`1:7.2+dfsg-7+deb12u18`	fixed
Debian	qemu	bookworm-security	`1:7.2+dfsg-7+deb12u15`	fixed
Ubuntu	qemu	pro	`1:2.3+dfsg-5ubuntu9`	vulnerable
Ubuntu	qemu	pro	`1:2.3+dfsg-5ubuntu10`	vulnerable
Ubuntu	qemu	pro	`1:2.4+dfsg-4ubuntu1`	vulnerable
Ubuntu	qemu	pro	`1:2.4+dfsg-4ubuntu2`	vulnerable
Ubuntu	qemu	pro	`1:2.4+dfsg-4ubuntu3`	vulnerable
Ubuntu	qemu	pro	`1:2.4+dfsg-5ubuntu3`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-1ubuntu2`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-1ubuntu3`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-1ubuntu4`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-1ubuntu5`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu1`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu2`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu4`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu6`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu7`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.1`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.2`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.3`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.4`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.5`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.6`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.7`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.8`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.9`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.10`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.11`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.13`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.14`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.15`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.16`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.20`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.21`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.22`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.24`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.25`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.26`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.28`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.29`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.30`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.31`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.32`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.33`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.34`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.35`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.36`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.37`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.38`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.39`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.40`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.41`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.42`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.43`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.44`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.45`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.46`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.47`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.48`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.49`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.51`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.51+esm1`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.51+esm2`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.51+esm3`	vulnerable
Ubuntu	qemu	pro	`1:2.5+dfsg-5ubuntu10.51+esm4`	fixed
Ubuntu	qemu	18.04	`1:2.10+dfsg-0ubuntu3`	vulnerable
Ubuntu	qemu	18.04	`1:2.10+dfsg-0ubuntu4`	vulnerable
Ubuntu	qemu	18.04	`1:2.10+dfsg-0ubuntu5`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu1`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu2`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu4`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu5`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu6`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.1`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.2`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.3`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.4`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.5`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.6`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.7`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.8`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.9`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.10`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.12`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.13`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.14`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.15`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.17`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.18`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.19`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.20`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.21`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.22`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.23`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.25`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.26`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.27`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.28`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.29`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.31`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.32`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.33`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.34`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.35`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.36`	vulnerable
Ubuntu	qemu	18.04	`1:2.11+dfsg-1ubuntu7.37`	fixed
Ubuntu	qemu	20.04	`1:4.0+dfsg-0ubuntu9`	vulnerable
Ubuntu	qemu	20.04	`1:4.0+dfsg-0ubuntu10`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-1ubuntu1`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-1ubuntu2`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu1`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu2`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu3`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu4`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu5`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.1`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.2`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.3`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.4`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.5`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.6`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.7`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.8`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.9`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.10`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.11`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.12`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.14`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.15`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.16`	vulnerable
Ubuntu	qemu	20.04	`1:4.2-3ubuntu6.17`	fixed
Suse	qemu	linux enterprise high performance computing 15 sp2-espos	`4.2.1-150200.69.1`	fixed
Suse	qemu	linux enterprise high performance computing 15 sp2-ltss	`4.2.1-150200.69.1`	fixed
Suse	qemu	linux enterprise server 15 sp2-bcl	`4.2.1-150200.69.1`	fixed
Suse	qemu	linux enterprise server 15 sp2-ltss	`4.2.1-150200.69.1`	fixed
Suse	qemu	linux enterprise server for sap applications 15 sp2	`4.2.1-150200.69.1`	fixed
Suse	qemu	manager proxy 4.1	`4.2.1-150200.69.1`	fixed
Suse	qemu	manager retail branch server 4.1	`4.2.1-150200.69.1`	fixed
Suse	qemu	manager server 4.1	`4.2.1-150200.69.1`	fixed
Suse	qemu	enterprise storage 7	`4.2.1-150200.69.1`	fixed
Opensuse	qemu	leap 15.3	`4.2.1-150200.69.1`	fixed
Opensuse	qemu	leap 15.4	`4.2.1-150200.69.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	qemu	source	sid	`1:5.2+dfsg-10`	not yet assigned	Not reported	[986795]
Debian	qemu	source	forky	`1:5.2+dfsg-10`	not yet assigned	Not reported	[986795]
Debian	qemu	source	trixie	`1:5.2+dfsg-10`	not yet assigned	Not reported	[986795]
Debian	qemu	source	bookworm	`1:5.2+dfsg-10`	not yet assigned	Not reported	[986795]
Ubuntu	qemu	deb	pro	`1:2.5+dfsg-5ubuntu10.51+esm4`	Not reported	UBUNTU-CVE-2021-3409	Not reported
Ubuntu	qemu	deb	18.04	`1:2.11+dfsg-1ubuntu7.37`	Not reported	UBUNTU-CVE-2021-3409	Not reported
Ubuntu	qemu	deb	20.04	`1:4.2-3ubuntu6.17`	Not reported	UBUNTU-CVE-2021-3409	Not reported
Suse	qemu	rpm	linux enterprise high performance computing 15 sp2-espos	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	linux enterprise high performance computing 15 sp2-ltss	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	linux enterprise server 15 sp2-bcl	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	linux enterprise server 15 sp2-ltss	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	linux enterprise server for sap applications 15 sp2	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	manager proxy 4.1	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	manager retail branch server 4.1	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	manager server 4.1	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Suse	qemu	rpm	enterprise storage 7	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Opensuse	qemu	rpm	leap 15.3	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported
Opensuse	qemu	rpm	leap 15.4	`4.2.1-150200.69.1`	Not reported	SUSE-SU-2022:3594-1	Not reported

[Debian bug #986795]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[qemu-block-extra]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-guest-agent]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-arm]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-common]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-data]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18 · all · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18 · all · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · all · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · all · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · all · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-gui]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-mips]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-misc]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-modules-opengl]Unknown
Source package: [qemu]
Details (2)
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-modules-spice]Unknown
Source package: [qemu]
Details (2)
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-ppc]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-riscv]Unknown
Source package: [qemu]
Details (2)
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-s390x]Unknown
Source package: [qemu]
Details (2)
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-sparc]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-x86]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-system-xen]Unknown
Source package: [qemu]
Details (3)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-user]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-user-binfmt]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
[qemu-user-static]Unknown
Source package: [qemu]
Details (6)
- 1:7.2+dfsg-7+deb12u18+b3 · amd64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u18+b3 · arm64 · bookworm
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · amd64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:10.0.2+ds-2+deb13u1~bpo12+1 · arm64 · bookworm-backports
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · amd64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12
- 1:7.2+dfsg-7+deb12u15 · arm64 · bookworm-security
  Fixed · Fixed: 1:5.2+dfsg-10
  dsa · qemu · debian · bookworm; dsa · qemu · debian · 12

Next results

Observed: Oct 23, 2026, 5:58:09 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]