tocsin

Debian/qemu: low 3.8

iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker.

Action: Upgrade qemu to 1:4.2-7 or later.

Affected

introducedfixedlast affected
01:4.2-7-

Fixed versions

1:4.2-7

Sources

published · modified · JSON