Red Hat Security Advisory

RHSA-2019:3345

virt:rhel security, bug fix, and enhancement update

Released 2019-11-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt-devel:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel, hivex-devel-1.3.15-7.module+el8.1.0+4066+0f1aadab.i686::virt-devel:rhel +47
Red Hat Enterprise Linux AppStream (v. 8) SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.noarch::virt:rhel, SLOF-20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab.src::virt:rhel, hivex-1.3.15-7.module+el8.1.0+4066+0f1aadab.aarch64::virt:rhel +47

TI-2019-09074 CVE-2019-12155 · GHSA-96vp-7vcr-rp4h

MEDIUM 41

interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05546 Published 2019-05-24 Partial fix CWE-476

TI-2019-07147 CVE-2019-9755 · GHSA-497j-f639-7ww4

LOW 31

An integer underflow issue exists in ntfs-3g 2017.3.23.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00531 Published 2019-06-05 Partial fix CWE-191

TI-2019-07209 CVE-2019-9824 · GHSA-hx33-mww2-6mf5

LOW 25

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00515 Published 2019-06-03 Partial fix CWE-908