SB2022052035 - openEuler update for qemu

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Integer overflow (CVE-ID: CVE-2021-4206)

The vulnerability allows a local user to escalate privileges on the target system.

The vulnerability exists due to integer overflow in the cursor_alloc() function in the QXL display device emulation in QEMU. A privileged user can crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.

2) Race condition (CVE-ID: CVE-2021-4207)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the QXL display device emulation in QEMU. A privileged user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

3) NULL pointer dereference (CVE-ID: CVE-2021-20196)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the floppy disk emulator of QEMU. A privileged guest can trigger a NULL pointer dereference error and cause a denial of service. 

4) Use-after-free (CVE-ID: CVE-2022-26353)

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in the virtio-net device of QEMU. A privileged user can exploit this issue to crash QEMU or potentially execute arbitrary code with elevated privileges.

5) Improper Resource Shutdown or Release (CVE-ID: CVE-2022-26354)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists in the vhost-vsock device of QEMU. A local user can trigger the error and gain access to sensitive information.

6) Use-after-free (CVE-ID: CVE-2021-3748)

The vulnerability allows a remote guest to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when in the virtio-net device of QEMU. A malicious guest can trigger the use-after-free error and execute arbitrary code on the host system with QEMU privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Remediation

Install update from vendor's website.

References

• https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1662