Red Hat Security Advisory

RHSA-2020:1261

virt:8.1 security update

Released 2020-04-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Advanced Virtualization CodeReady Builder for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt-devel:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1, hivex-devel-1.3.15-7.module+el8.1.1+5309+6d656f05.i686::virt-devel:8.1 +47
Advanced Virtualization for RHEL 8.1.1 SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.noarch::virt:8.1, SLOF-20190703-1.gitba1ab360.module+el8.1.1+5309+6d656f05.src::virt:8.1, hivex-1.3.15-7.module+el8.1.1+5309+6d656f05.aarch64::virt:8.1 +47

TI-2020-05679 CVE-2020-7039 · GHSA-fr8m-vw66-8v9r

LOW 31

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.03566 Published 2020-01-16 Partial fix CWE-787

TI-2020-06904 CVE-2020-8608 · GHSA-495h-ww9w-vg4p

LOW 30

In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.02486 Published 2020-02-06 Partial fix CWE-120