Red Hat Security Advisory

RHSA-2020:0731

virt:8.1 and virt-devel:8.1 security and enhancement update

Released 2020-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Advanced Virtualization CodeReady Builder for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt-devel:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1, hivex-devel-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1 +47
Advanced Virtualization for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.noarch::virt:8.1, SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.aarch64::virt:8.1 +47

Fixes 1 record

TI-2020-01657 CVE-2020-1711 · GHSA-8gvc-95pj-x5r8

Heap-based buffer overflow in Red Hat QEMU

MEDIUM 40

An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server while checking the status of a Logical Address Bloc…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.04018 Published 2020-02-11 Partial fix · 4.2.1 CWE-122