Red Hat Security AdvisoryRHSA-2020:0366
qemu-kvm security, bug fix, and enhancement update
Released 2020-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
- Red Hat Enterprise Linux Server (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
- Red Hat Enterprise Linux Workstation (v. 7) qemu-img-10:1.5.3-167.el7_7.4, qemu-kvm-10:1.5.3-167.el7_7.4, qemu-kvm-common-10:1.5.3-167.el7_7.4 +1
Fixes 2 records
Priority MEDIUM 55
ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.16658 · Published 2019-07-29 · Partial fix CWE-755
Priority LOW 34
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03133 · Published 2019-11-14 · Partial fix
