Oval Definition:	oval:org.opensuse.security:def:20224172
Revision Date: 2023-06-22 Version: 1 Title: CVE-2022-4172 Description: An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host. Family: unix Class: vulnerability Status: Reference(s): Mitre CVE-2022-4172 SUSE CVE-2022-4172 Platform(s): SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 Product(s): Definition Synopsis SUSE Linux Enterprise Micro 5.3 is installed AND Package Information qemu is not affected OR qemu-accel-tcg-x86 is not affected OR qemu-arm is not affected OR qemu-audio-spice is not affected OR qemu-chardev-spice is not affected OR qemu-guest-agent is not affected OR qemu-hw-display-qxl is not affected OR qemu-hw-display-virtio-gpu is not affected OR qemu-hw-display-virtio-vga is not affected OR qemu-hw-usb-redirect is not affected OR qemu-ipxe is not affected OR qemu-s390x is not affected OR qemu-seabios is not affected OR qemu-sgabios is not affected OR qemu-tools is not affected OR qemu-ui-opengl is not affected OR qemu-ui-spice-core is not affected OR qemu-vgabios is not affected OR qemu-x86 is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP5 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed OR SUSE Linux Enterprise Server 15 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed AND qemu-tools-7.1.0-150500.47.15 is installed
BACK