Oval Definition:oval:org.opensuse.security:def:20178284
Revision Date:2022-09-02Version:1
Title:CVE-2017-8284
Description:

** DISPUTED ** The disas_insn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as demonstrated by procmail. NOTE: the vendor has stated "this bug does not violate any security guarantees QEMU makes."
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2017-8284
SUSE CVE-2017-8284
Platform(s):SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Retail Branch Server 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • OR SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Module for Basesystem 15 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND qemu is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 is installed
  • OR SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP2 is installed
  • OR SUSE Linux Enterprise Server 11 SP3 is installed
  • AND kvm is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND qemu is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • qemu is not affected
  • OR qemu-block-curl is not affected
  • OR qemu-block-iscsi is not affected
  • OR qemu-block-rbd is not affected
  • OR qemu-block-ssh is not affected
  • OR qemu-guest-agent is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-kvm is not affected
  • OR qemu-lang is not affected
  • OR qemu-ppc is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • qemu is not affected
  • OR qemu-arm is not affected
  • OR qemu-audio-alsa is not affected
  • OR qemu-audio-oss is not affected
  • OR qemu-audio-pa is not affected
  • OR qemu-audio-sdl is not affected
  • OR qemu-block-curl is not affected
  • OR qemu-block-iscsi is not affected
  • OR qemu-block-rbd is not affected
  • OR qemu-block-ssh is not affected
  • OR qemu-guest-agent is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-kvm is not affected
  • OR qemu-lang is not affected
  • OR qemu-ppc is not affected
  • OR qemu-s390 is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-ui-curses is not affected
  • OR qemu-ui-gtk is not affected
  • OR qemu-ui-sdl is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
    • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.1 is installed
  • AND Package Information
  • qemu is not affected
  • OR qemu-arm is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-s390x is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND qemu is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • qemu is not affected
  • OR qemu-arm is not affected
  • OR qemu-audio-alsa is not affected
  • OR qemu-audio-oss is not affected
  • OR qemu-audio-pa is not affected
  • OR qemu-audio-sdl is not affected
  • OR qemu-block-curl is not affected
  • OR qemu-block-iscsi is not affected
  • OR qemu-block-rbd is not affected
  • OR qemu-block-ssh is not affected
  • OR qemu-guest-agent is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-kvm is not affected
  • OR qemu-lang is not affected
  • OR qemu-ppc is not affected
  • OR qemu-s390 is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-ui-curses is not affected
  • OR qemu-ui-gtk is not affected
  • OR qemu-ui-sdl is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • OR SUSE Linux Enterprise Server 12 SP4 is installed
  • AND qemu is not affected
  • OR Package Information
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND
  • qemu is not affected
  • OR qemu-block-curl is not affected
  • OR qemu-block-iscsi is not affected
  • OR qemu-block-rbd is not affected
  • OR qemu-block-ssh is not affected
  • OR qemu-guest-agent is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-kvm is not affected
  • OR qemu-lang is not affected
  • OR qemu-ppc is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
    • BACK