tocsin

Debian/qemu: medium 6.5

An off-by-one error was found in QEMU's KVM Xen guest support. A malicious guest could use this flaw to trigger out-of-bounds heap accesses in the QEMU process via the emulated Xen physdev hypercall i

Action: Upgrade qemu to 1:10.0.8+ds-0+deb13u1 or later.

Affected

introducedfixedlast affected
01:10.0.8+ds-0+deb13u1-

Fixed versions

1:10.0.8+ds-0+deb13u1

Sources

published · modified · JSON