--- title: 'USN-3261-1: QEMU vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-3261-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-3261-1 --- # USN-3261-1: QEMU vulnerabilities Publication date 20 April 2017 Overview Several security issues were fixed in QEMU. Releases [16.10](https://ubuntu.com/security/notices?release=yakkety) [16.04 LTS](https://ubuntu.com/security/notices?release=xenial) [14.04 LTS](https://ubuntu.com/security/notices?release=trusty) --- Open side navigation ## Packages * [qemu](https://ubuntu.com/security/cves?package=qemu) - Machine emulator and virtualizer ## Details Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. ([CVE-2016-10028](https://ubuntu.com/security/CVE-2016-10028), [CVE-2016-10029](https://ubuntu.com/security/CVE-2016-10029)) Li Qiang discovered that QEMU incorrectly handled the 6300esb watchdog. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. ([CVE-2016-10155](https://ubuntu.com/security/CVE-2016-10155)) Li Qiang discovered that QEMU incorrectly handled the i.MX Fast Ethernet Controller. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. ([CVE-2016-7907](https://ubuntu.com/security/CVE-2016-7907)) It was discovered... --- Show more ## Update instructions After a standard system update you need to restart all QEMU virtual machines to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 16.10 yakkety | [qemu-system](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-aarch64](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-arm](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-mips](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-misc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-ppc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-s390x](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-sparc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | [qemu-system-x86](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.6.1+dfsg-0ubuntu5.4](https://launchpad.net/ubuntu/+source/qemu/1:2.6.1+dfsg-0ubuntu5.4) | | | | 16.04 LTS xenial | [qemu-system](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-aarch64](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-arm](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-mips](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-misc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-ppc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-s390x](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-sparc](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | [qemu-system-x86](https://launchpad.net/ubuntu/+source/qemu) –  [1:2.5+dfsg-5ubuntu10.11](https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.11) | | | | 14.04 LTS trusty | [qemu-system](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-aarch64](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-arm](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-mips](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-misc](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-ppc](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-sparc](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | | [qemu-system-x86](https://launchpad.net/ubuntu/+source/qemu) –  [2.0.0+dfsg-2ubuntu1.33](https://launchpad.net/ubuntu/+source/qemu/2.0.0+dfsg-2ubuntu1.33) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2017-6505](https://ubuntu.com/security/CVE-2017-6505) * [CVE-2017-5987](https://ubuntu.com/security/CVE-2017-5987) * [CVE-2017-5973](https://ubuntu.com/security/CVE-2017-5973) * [CVE-2017-5898](https://ubuntu.com/security/CVE-2017-5898) * [CVE-2017-5857](https://ubuntu.com/security/CVE-2017-5857) * [CVE-2017-5856](https://ubuntu.com/security/CVE-2017-5856) * [CVE-2017-5667](https://ubuntu.com/security/CVE-2017-5667) * [CVE-2017-5579](https://ubuntu.com/security/CVE-2017-5579) * [CVE-2017-5578](https://ubuntu.com/security/CVE-2017-5578) * [CVE-2017-5552](https://ubuntu.com/security/CVE-2017-5552) --- Show 27 more references ## Related notices * [USN-3268-1](https://ubuntu.com/security/notices/USN-3268-1)