CVE-2019-12155
CVE-2019-12155
This page contains facts from public vulnerability sources. Check the original advisory before updating.
interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.
CVSS 7.5 · High · EPSS 5.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
qemu Debian:12
- Affected ranges
- ECOSYSTEM: < 1:3.1+dfsg-8
Update to 1:3.1+dfsg-8
qemu Debian:13
- Affected ranges
- ECOSYSTEM: < 1:3.1+dfsg-8
Update to 1:3.1+dfsg-8
qemu Debian:14
- Affected ranges
- ECOSYSTEM: < 1:3.1+dfsg-8
Update to 1:3.1+dfsg-8
qemu Ubuntu:Pro:14.04:LTS
- Versions
- 1.5.0+dfsg-3ubuntu5
- 1.5.0+dfsg-3ubuntu6
- 1.6.0+dfsg-2ubuntu1
- 1.6.0+dfsg-2ubuntu2
- 1.6.0+dfsg-2ubuntu3
- 1.6.0+dfsg-2ubuntu4
- 1.7.0+dfsg-2ubuntu1
- 1.7.0+dfsg-2ubuntu2
- 1.7.0+dfsg-2ubuntu3
- 1.7.0+dfsg-2ubuntu4
- 1.7.0+dfsg-2ubuntu5
- 1.7.0+dfsg-2ubuntu7
- 1.7.0+dfsg-2ubuntu8
- 1.7.0+dfsg-2ubuntu9
- 1.7.0+dfsg-3ubuntu1~ppa1
- 1.7.0+dfsg-3ubuntu1
- 1.7.0+dfsg-3ubuntu2
- 1.7.0+dfsg-3ubuntu3
- 1.7.0+dfsg-3ubuntu4
- 1.7.0+dfsg-3ubuntu5
- 1.7.0+dfsg-3ubuntu6
- 1.7.0+dfsg-3ubuntu7
- 2.0.0~rc1+dfsg-0ubuntu1
- 2.0.0~rc1+dfsg-0ubuntu2
- 2.0.0~rc1+dfsg-0ubuntu3
- 2.0.0~rc1+dfsg-0ubuntu3.1
- 2.0.0+dfsg-2ubuntu1
- 2.0.0+dfsg-2ubuntu1.1
- 2.0.0+dfsg-2ubuntu1.2
- 2.0.0+dfsg-2ubuntu1.3
- 2.0.0+dfsg-2ubuntu1.5
- 2.0.0+dfsg-2ubuntu1.6
- 2.0.0+dfsg-2ubuntu1.7
- 2.0.0+dfsg-2ubuntu1.8
- 2.0.0+dfsg-2ubuntu1.9
- 2.0.0+dfsg-2ubuntu1.10
- 2.0.0+dfsg-2ubuntu1.11
- 2.0.0+dfsg-2ubuntu1.13
- 2.0.0+dfsg-2ubuntu1.14
- 2.0.0+dfsg-2ubuntu1.15
- 2.0.0+dfsg-2ubuntu1.16
- 2.0.0+dfsg-2ubuntu1.17
- 2.0.0+dfsg-2ubuntu1.18
- 2.0.0+dfsg-2ubuntu1.19
- 2.0.0+dfsg-2ubuntu1.20
- 2.0.0+dfsg-2ubuntu1.21
- 2.0.0+dfsg-2ubuntu1.22
- 2.0.0+dfsg-2ubuntu1.24
- 2.0.0+dfsg-2ubuntu1.25
- 2.0.0+dfsg-2ubuntu1.26
- 2.0.0+dfsg-2ubuntu1.27
- 2.0.0+dfsg-2ubuntu1.28
- 2.0.0+dfsg-2ubuntu1.29
- 2.0.0+dfsg-2ubuntu1.30
- 2.0.0+dfsg-2ubuntu1.31
- 2.0.0+dfsg-2ubuntu1.32
- 2.0.0+dfsg-2ubuntu1.33
- 2.0.0+dfsg-2ubuntu1.34
- 2.0.0+dfsg-2ubuntu1.35
- 2.0.0+dfsg-2ubuntu1.36
- 2.0.0+dfsg-2ubuntu1.38
- 2.0.0+dfsg-2ubuntu1.39
- 2.0.0+dfsg-2ubuntu1.40
- 2.0.0+dfsg-2ubuntu1.41
- 2.0.0+dfsg-2ubuntu1.42
- 2.0.0+dfsg-2ubuntu1.43
- 2.0.0+dfsg-2ubuntu1.44
- 2.0.0+dfsg-2ubuntu1.45
- 2.0.0+dfsg-2ubuntu1.46
- Affected ranges
- ECOSYSTEM: < 2.0.0+dfsg-2ubuntu1.47
Update to 2.0.0+dfsg-2ubuntu1.47
qemu Ubuntu:16.04:LTS
- Versions
- 1:2.3+dfsg-5ubuntu9
- 1:2.3+dfsg-5ubuntu10
- 1:2.4+dfsg-4ubuntu1
- 1:2.4+dfsg-4ubuntu2
- 1:2.4+dfsg-4ubuntu3
- 1:2.4+dfsg-5ubuntu3
- 1:2.5+dfsg-1ubuntu2
- 1:2.5+dfsg-1ubuntu3
- 1:2.5+dfsg-1ubuntu4
- 1:2.5+dfsg-1ubuntu5
- 1:2.5+dfsg-5ubuntu1
- 1:2.5+dfsg-5ubuntu2
- 1:2.5+dfsg-5ubuntu4
- 1:2.5+dfsg-5ubuntu6
- 1:2.5+dfsg-5ubuntu7
- 1:2.5+dfsg-5ubuntu10
- 1:2.5+dfsg-5ubuntu10.1
- 1:2.5+dfsg-5ubuntu10.2
- 1:2.5+dfsg-5ubuntu10.3
- 1:2.5+dfsg-5ubuntu10.4
- 1:2.5+dfsg-5ubuntu10.5
- 1:2.5+dfsg-5ubuntu10.6
- 1:2.5+dfsg-5ubuntu10.7
- 1:2.5+dfsg-5ubuntu10.8
- 1:2.5+dfsg-5ubuntu10.9
- 1:2.5+dfsg-5ubuntu10.10
- 1:2.5+dfsg-5ubuntu10.11
- 1:2.5+dfsg-5ubuntu10.13
- 1:2.5+dfsg-5ubuntu10.14
- 1:2.5+dfsg-5ubuntu10.15
- 1:2.5+dfsg-5ubuntu10.16
- 1:2.5+dfsg-5ubuntu10.20
- 1:2.5+dfsg-5ubuntu10.21
- 1:2.5+dfsg-5ubuntu10.22
- 1:2.5+dfsg-5ubuntu10.24
- 1:2.5+dfsg-5ubuntu10.25
- 1:2.5+dfsg-5ubuntu10.26
- 1:2.5+dfsg-5ubuntu10.28
- 1:2.5+dfsg-5ubuntu10.29
- 1:2.5+dfsg-5ubuntu10.30
- 1:2.5+dfsg-5ubuntu10.31
- 1:2.5+dfsg-5ubuntu10.32
- 1:2.5+dfsg-5ubuntu10.33
- 1:2.5+dfsg-5ubuntu10.34
- 1:2.5+dfsg-5ubuntu10.35
- 1:2.5+dfsg-5ubuntu10.36
- 1:2.5+dfsg-5ubuntu10.37
- 1:2.5+dfsg-5ubuntu10.38
- 1:2.5+dfsg-5ubuntu10.39
- 1:2.5+dfsg-5ubuntu10.40
- 1:2.5+dfsg-5ubuntu10.41
- Affected ranges
- ECOSYSTEM: < 1:2.5+dfsg-5ubuntu10.42
Update to 1:2.5+dfsg-5ubuntu10.42
qemu Ubuntu:18.04:LTS
- Versions
- 1:2.10+dfsg-0ubuntu3
- 1:2.10+dfsg-0ubuntu4
- 1:2.10+dfsg-0ubuntu5
- 1:2.11+dfsg-1ubuntu1
- 1:2.11+dfsg-1ubuntu2
- 1:2.11+dfsg-1ubuntu4
- 1:2.11+dfsg-1ubuntu5
- 1:2.11+dfsg-1ubuntu6
- 1:2.11+dfsg-1ubuntu7
- 1:2.11+dfsg-1ubuntu7.1
- 1:2.11+dfsg-1ubuntu7.2
- 1:2.11+dfsg-1ubuntu7.3
- 1:2.11+dfsg-1ubuntu7.4
- 1:2.11+dfsg-1ubuntu7.5
- 1:2.11+dfsg-1ubuntu7.6
- 1:2.11+dfsg-1ubuntu7.7
- 1:2.11+dfsg-1ubuntu7.8
- 1:2.11+dfsg-1ubuntu7.9
- 1:2.11+dfsg-1ubuntu7.10
- 1:2.11+dfsg-1ubuntu7.12
- 1:2.11+dfsg-1ubuntu7.13
- 1:2.11+dfsg-1ubuntu7.14
- 1:2.11+dfsg-1ubuntu7.15
- 1:2.11+dfsg-1ubuntu7.17
- 1:2.11+dfsg-1ubuntu7.18
- 1:2.11+dfsg-1ubuntu7.19
- Affected ranges
- ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.20
Update to 1:2.11+dfsg-1ubuntu7.20
qemu Ubuntu:20.04:LTS
- Versions
- 1:4.0+dfsg-0ubuntu9
- 1:4.0+dfsg-0ubuntu10
- Affected ranges
- ECOSYSTEM: < 1:4.2-1ubuntu1
Update to 1:4.2-1ubuntu1
Original sources
- https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg01321.html
- http://www.openwall.com/lists/oss-security/2019/05/22/1
- https://www.debian.org/security/2019/dsa-4454
- https://seclists.org/bugtraq/2019/May/76
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html
- https://access.redhat.com/errata/RHSA-2019:2607
- https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html
- https://access.redhat.com/errata/RHSA-2019:2892
- https://access.redhat.com/errata/RHSA-2019:3179
- https://access.redhat.com/errata/RHSA-2019:3345
- https://access.redhat.com/errata/RHSA-2019:3742
- https://access.redhat.com/errata/RHSA-2019:3787
- https://usn.ubuntu.com/4191-2/
- https://usn.ubuntu.com/4191-1/
- https://access.redhat.com/errata/RHBA-2019:3723
- https://access.redhat.com/errata/RHSA-2019:4344
- https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3be7eb2f47bf71db5f80fcf8750ea395dd5ffdd2
- https://nvd.nist.gov/vuln/detail/CVE-2019-12155