Oval Definition:oval:org.opensuse.security:def:202235414
Revision Date:2023-06-22Version:1
Title:CVE-2022-35414
Description:

** DISPUTED ** softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time."
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2022-35414
SUSE CVE-2022-35414
SUSE-SU-2022:3594-1
SUSE-SU-2022:3660-1
SUSE-SU-2022:3768-1
SUSE-SU-2022:3795-1
SUSE-SU-2023:0761-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Module for Basesystem 15 SP4
SUSE Linux Enterprise Module for Basesystem 15 SP5
SUSE Linux Enterprise Module for Server Applications 15 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Micro 5.3 is installed
  • AND Package Information
  • qemu-6.2.0-150400.37.8.2 is installed
  • OR qemu-accel-tcg-x86-6.2.0-150400.37.8.2 is installed
  • OR qemu-arm-6.2.0-150400.37.8.2 is installed
  • OR qemu-audio-spice-6.2.0-150400.37.8.2 is installed
  • OR qemu-chardev-spice-6.2.0-150400.37.8.2 is installed
  • OR qemu-guest-agent-6.2.0-150400.37.8.2 is installed
  • OR qemu-hw-display-qxl-6.2.0-150400.37.8.2 is installed
  • OR qemu-hw-display-virtio-gpu-6.2.0-150400.37.8.2 is installed
  • OR qemu-hw-display-virtio-vga-6.2.0-150400.37.8.2 is installed
  • OR qemu-hw-usb-redirect-6.2.0-150400.37.8.2 is installed
  • OR qemu-ipxe-1.0.0+-150400.37.8.2 is installed
  • OR qemu-s390x-6.2.0-150400.37.8.2 is installed
  • OR qemu-seabios-1.15.0_0_g2dd4b9b-150400.37.8.2 is installed
  • OR qemu-sgabios-8-150400.37.8.2 is installed
  • OR qemu-tools-6.2.0-150400.37.8.2 is installed
  • OR qemu-ui-opengl-6.2.0-150400.37.8.2 is installed
  • OR qemu-ui-spice-core-6.2.0-150400.37.8.2 is installed
  • OR qemu-vgabios-1.15.0_0_g2dd4b9b-150400.37.8.2 is installed
  • OR qemu-x86-6.2.0-150400.37.8.2 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP4 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND qemu-tools is affected
  • OR Package Information
  • SUSE Linux Enterprise High Performance Computing 15 SP4 is installed
  • OR SUSE Linux Enterprise Module for Server Applications 15 SP4 is installed
  • OR SUSE Linux Enterprise Server 15 SP4 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed
  • OR SUSE Manager Proxy 4.3 is installed
  • OR SUSE Manager Retail Branch Server 4.3 is installed
  • OR SUSE Manager Server 4.3 is installed
  • AND
  • qemu is affected
  • OR qemu-SLOF is affected
  • OR qemu-accel-tcg-x86 is affected
  • OR qemu-arm is affected
  • OR qemu-audio-alsa is affected
  • OR qemu-audio-pa is affected
  • OR qemu-audio-spice is affected
  • OR qemu-block-curl is affected
  • OR qemu-block-iscsi is affected
  • OR qemu-block-rbd is affected
  • OR qemu-block-ssh is affected
  • OR qemu-chardev-baum is affected
  • OR qemu-chardev-spice is affected
  • OR qemu-guest-agent is affected
  • OR qemu-hw-display-qxl is affected
  • OR qemu-hw-display-virtio-gpu is affected
  • OR qemu-hw-display-virtio-gpu-pci is affected
  • OR qemu-hw-display-virtio-vga is affected
  • OR qemu-hw-s390x-virtio-gpu-ccw is affected
  • OR qemu-hw-usb-host is affected
  • OR qemu-hw-usb-redirect is affected
  • OR qemu-ipxe is affected
  • OR qemu-ksm is affected
  • OR qemu-kvm is affected
  • OR qemu-lang is affected
  • OR qemu-ppc is affected
  • OR qemu-s390x is affected
  • OR qemu-seabios is affected
  • OR qemu-sgabios is affected
  • OR qemu-skiboot is affected
  • OR qemu-ui-curses is affected
  • OR qemu-ui-gtk is affected
  • OR qemu-ui-opengl is affected
  • OR qemu-ui-spice-app is affected
  • OR qemu-ui-spice-core is affected
  • OR qemu-vgabios is affected
  • OR qemu-x86 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.1 is installed
  • AND Package Information
  • qemu is affected
  • OR qemu-arm is affected
  • OR qemu-ipxe is affected
  • OR qemu-s390x is affected
  • OR qemu-seabios is affected
  • OR qemu-sgabios is affected
  • OR qemu-tools is affected
  • OR qemu-vgabios is affected
  • OR qemu-x86 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Micro 5.2 is installed
  • AND Package Information
  • qemu is affected
  • OR qemu-arm is affected
  • OR qemu-audio-spice is affected
  • OR qemu-chardev-spice is affected
  • OR qemu-guest-agent is affected
  • OR qemu-hw-display-qxl is affected
  • OR qemu-hw-display-virtio-gpu is affected
  • OR qemu-hw-display-virtio-vga is affected
  • OR qemu-hw-usb-redirect is affected
  • OR qemu-ipxe is affected
  • OR qemu-s390x is affected
  • OR qemu-seabios is affected
  • OR qemu-sgabios is affected
  • OR qemu-tools is affected
  • OR qemu-ui-opengl is affected
  • OR qemu-ui-spice-core is affected
  • OR qemu-vgabios is affected
  • OR qemu-x86 is affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND qemu is affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • qemu is affected
  • OR qemu-arm is affected
  • OR qemu-audio-alsa is affected
  • OR qemu-audio-oss is affected
  • OR qemu-audio-pa is affected
  • OR qemu-audio-sdl is affected
  • OR qemu-block-curl is affected
  • OR qemu-block-iscsi is affected
  • OR qemu-block-rbd is affected
  • OR qemu-block-ssh is affected
  • OR qemu-guest-agent is affected
  • OR qemu-ipxe is affected
  • OR qemu-kvm is affected
  • OR qemu-lang is affected
  • OR qemu-ppc is affected
  • OR qemu-s390 is affected
  • OR qemu-seabios is affected
  • OR qemu-sgabios is affected
  • OR qemu-tools is affected
  • OR qemu-ui-curses is affected
  • OR qemu-ui-gtk is affected
  • OR qemu-ui-sdl is affected
  • OR qemu-vgabios is affected
  • OR qemu-x86 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • qemu is not affected
  • OR qemu-block-curl is not affected
  • OR qemu-block-iscsi is not affected
  • OR qemu-block-rbd is not affected
  • OR qemu-block-ssh is not affected
  • OR qemu-guest-agent is not affected
  • OR qemu-ipxe is not affected
  • OR qemu-kvm is not affected
  • OR qemu-lang is not affected
  • OR qemu-ppc is not affected
  • OR qemu-seabios is not affected
  • OR qemu-sgabios is not affected
  • OR qemu-tools is not affected
  • OR qemu-vgabios is not affected
  • OR qemu-x86 is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND qemu-tools-7.1.0-150500.47.15 is installed
  • BACK