Red Hat Security Advisory

RHSA-2020:0669

qemu-kvm-ma security update

Released 2020-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server EUS (v. 7.6) qemu-img-ma-10:2.12.0-18.el7_6.5, qemu-kvm-common-ma-10:2.12.0-18.el7_6.5, qemu-kvm-ma-10:2.12.0-18.el7_6.5 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) qemu-img-ma-10:2.12.0-18.el7_6.5, qemu-kvm-common-ma-10:2.12.0-18.el7_6.5, qemu-kvm-ma-10:2.12.0-18.el7_6.5 +1

Fixes 1 record

TI-2020-01657 CVE-2020-1711 · GHSA-8gvc-95pj-x5r8

Heap-based buffer overflow in Red Hat QEMU

MEDIUM 40

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Bloc…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.04018 Published 2020-02-11 Partial fix · 4.2.1 CWE-122