Red Hat Security AdvisoryRHSA-2020:0730
qemu-kvm-rhev security, bug fix, and enhancement update
Released 2020-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHV-M 4.2 qemu-img-rhev-10:2.12.0-18.el7_6.9, qemu-kvm-common-rhev-10:2.12.0-18.el7_6.9, qemu-kvm-rhev-10:2.12.0-18.el7_6.9 +1
Fixes 2 records
Priority MEDIUM 40
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Bloc…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.04018 · Published 2020-02-11 · Partial fix · 4.2.1 CWE-122
Priority LOW 34
TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access.
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.03133 · Published 2019-11-14 · Partial fix
